1. Controller
Pumpkin Design Ltd , Business ID 2382682-5
Haikanvuori 5 C 1
33960 PIRKKALA
FINLAND
help@aarrelabel.live

2. Contact person concerning the register
Minna Uosukainen
Haikanvuori 5 C 1
33960 PIRKKALA
FINLAND
help@aarrelabel.live

3. Name of the register
Customer register for Aarrelabel online store.

4. Purpose of processing personal data
The personal data will be processed to assist the management of Aarrelabel’s online customer relationships.

The processing of personal data is based on the Personal Data Act:

• 8 § clause 1, sections 5 and 7 (management of customer and stakeholder relations)
• 19 § (direct marketing and parallel broadcasts)

The processing of personal data is not outsourced.

5. Data content of the register

The following information is stored on the registered subject:

• The data given by the user or personally identifiable information
  
  
  • Identification information, such as a person’s name
  • Company name
  • Contact information, such as address, email address, country and telephone number
  • Purchasing history, among others, ordered products and their price information
  • Delivery information, such as the selected delivery method and delivery address
  • Product reviews
  • An account number to be used for repayments concerning bank account payments
  • The user name of the registered user

• In case order is to be delivered to a person other than the person who has made the order, the following will be stored concerning the order recipient:
  
  
  • Identification information, such as the person’s name
  • Company name
  • Contact details, such as address, email address, country and telephone number

6. Regular sources of information
The information to be stored in the register will be provided by the registered user.

7. The handing over of data
Personal data will not be handed over to third parties, except to authorities and those partners whose services Pumpkin Design Ltd (Aarrelabel) uses, for example, to collect, transport and distribute orders or to communicate with customer service.

8. Transfer of data outside the EU or EEA
The information contained in the register will not be transmitted outside the EU or EEA. However, we use the technology of foreign service providers on our website and the data collected by their possible cookies are transferred and stored to service providers’ servers, some of which may be located outside the EU. These include: Google Analytics, Google Tag Manager, and Facebook Conversion Pixel.

9. Principles of registry protection
Manual material: No paper printouts are kept of the register. The possible paper return form filled out by customers by hand will be kept for possible inspection and feedback processing for a maximum of 2 months from arrival, after which it will be destroyed as required by the Data Protection Regulation.

Information to be processed by computer: The technical protection of the registry against information theft has been entrusted to a professional service provider. Every machine and server possesses security software. The network is protected by a firewall.

The organization only has a limited number of certain, individually named persons who have the right to access the register. Access to the register requires a username, password and Two-Factor Authentication. Users are bound by a confidentiality obligation.

10. Right to inspection
Everyone has the right to review the information concerning them stored in the personal records of Aarrelabel online store. The inspection request must be submitted in a personally signed or similarly certified document. Inspection requests cannot be made by telephone.

The register controller has the right to verify that the person inspecting the data is checking their own personal information, and is not snooping. The information shall be provided without undue delay, in an understandable form and upon written request. The right for inspection is free of charge. Requests for inspection must be submitted to the registry administrator referred to in section 2.

11. Right to request correction of data
To correct any incorrect information, the data subject can submit a correction request to the controller, stating, for example:

• Which information in the register or information related to the processing of which matter the request concerns
• Which data needs to be corrected
• Whether information is required to be completely deleted as unnecessary, to be corrected as otherwise incorrect, or to supplement the stored information with the data subject's own view
• If the information is required to be corrected as incorrect, a verbatim replacement text must be provided
• The requirement must state why the information is incorrect
• If any document can be used to prove that the information provided in the correction request is correct, such document must be attached to the request

The request for correction must be submitted to the person handling the registration matters mentioned in section 2 in a document signed by hand or certified in a similar manner. The request for correction cannot be made by telephone.

12. Other rights related to the processing of personal data
According to Section 30 of the Personal Data Act, the data subject has the right to prohibit the data controller from processing information about him or her for the purposes of direct advertising, distance selling or direct marketing, as well as market and opinion research (§ 30 of the Personal Data Act).

 

aarrelabel.live e-commerce newsletter registration and data protection statement

Pumpkin Design Ltd (hereinafter referred to as ‘Aarrelabel’) is committed to protecting personal data and respecting privacy. This is the aarrelabel.live e-commerce newsletter registration and data protection statement in accordance with the EU General Data Protection Regulation (GDPR). Aarrelabel collects and processes personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679. The newsletter is managed by employees responsible for aarrelabel.live e-commerce and marketing on a need-to-know basis.

This privacy statement explains why personal data is collected, how it is processed and used, how it is protected and what rights you have regarding your personal data. The statement also contains the contact details of the controller responsible for processing personal data.

29.07.2026

1. Controller
Pumpkin Design Ltd / Aarrelabel (Business ID 2382682-5)
Haikanvuori 5 C 1
33960 PIRKKALA
FINLAND
help@aarrelabel.live

2. Contact person for matters concerning the register
Minna Uosukainen
Haikanvuori 5 C 1
33960 PIRKKALA
FINLAND
help@aarrelabel.live

3. Name of the register
aarrelabel.live online store newsletter subscribers

4. Legal basis and purpose of processing personal data
aarrelabel.live online store newsletter is published approximately once a week. The newsletter informs online store customers and other interested parties about the online store's new products, offers and other current issues. The Aarrelabel newsletter can be subscribed to on the aarrelabel.live website.

The purpose of processing personal data is to contact customers, maintain customer relationships and marketing.

The legal basis for processing personal data under the EU General Data Protection Regulation is the person's own consent. Consent must be voluntary, specific, informed and unambiguous, and can be given in the electronic newsletter subscription form on the aarrelabel.live website.

You give your consent to the processing of your data when you subscribe to the Aarrelabel newsletter. The data controller considers that in this context the processing of data is lawful because newsletter subscribers ('registered') provide their personal data themselves. Consent can be withdrawn at any time either via an online form or by notifying the controller. Withdrawal of consent does not change the lawfulness of the data processing prior to withdrawal.

Personal data will not be used for automated decision-making or profiling. The purpose of these rules is to ensure that the individual understands what they are consenting to. Once the individual consents to the processing of their personal data, the data may only be processed for the purposes for which consent was given.

5. Data content of the register
The email address is the only mandatory personal data required to subscribe to the newsletter. It is needed to deliver the newsletter to the subscriber, as the newsletter is delivered by email.

We use the Klaviyo service provided by Klaviyo Inc. to implement email marketing and marketing automation. Klaviyo is a global company headquartered in Boston, Massachusetts (USA). The company has offices in the USA, the UK and Australia. Klaviyo acts as a processor of personal data on our behalf.

Klaviyo is integrated with our online store (Shopify), which allows us to also process customer relationship information, such as contact information, purchase history and order information.

The data stored in the register are:

• email address
• first and last name
• telephone number
• address information
• purchase history
• order information
• newsletter subscription information
• online store usage information (e.g. products browsed, shopping cart, purchases)
• email opening and click information
• information used for segmentation

The IP addresses of website visitors and cookies necessary for the service's functions are processed on the basis of legitimate interest, for example to ensure data security and to collect statistical information about website visitors in cases where they can be considered personal data. If necessary, consent is requested separately for third-party cookies.

6. How long is personal data stored?
The controller stores personal data for as long as is necessary to fulfill the purpose for which the data was collected or for further processing, i.e. until the user has terminated their subscription or until the system administrator has processed a written request to terminate the subscription (maximum one month). If the user terminates their subscription, their personal data will be permanently deleted. If the email address is updated, the history of the previous email address will not be stored.

7. Regular data sources
The information stored in the register is obtained from the customer, for example, from messages sent via digital forms, via email, via social media services, from events and other situations in which the customer provides their information.

Information about contact persons of companies and other organizations can also be collected from public sources such as websites.

8. Regular data transfers and data transfers outside the EU or EEA
The data is not routinely transferred to other parties. Data may be transferred by the controller also outside the EU or EEA.

The Klaviyo platform and customer data are located in Amazon Web Services (AWS) data centers in the United States. Klaviyo may use carefully selected subprocessors to provide its services. More information about Klaviyo’s subprocessors and where they process personal data is available at: https://www.klaviyo.com/legal/subprocessors.

If personal data is transferred outside the European Economic Area, the transfers will be carried out in accordance with applicable data protection legislation using appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or another suitable transfer mechanism.

9. Principles of register protection
All personal data in digital form (e-mails) are stored on the servers of the online store (Shopify) and the newsletter service provider (Klaviyo). Care is taken in the processing of the register and the data processed by the information systems are protected appropriately. When the register data is stored on the servers of the online store and the newsletter service provider, the physical and digital security of their equipment is appropriately ensured. The controller ensures that the stored data and other information critical to the security of personal data are handled confidentially and only by employees whose job description requires it.

10. Who has access to personal data, and to whom is the data disclosed?
Access to personal data is granted to employees responsible for marketing, communications, customer service and online store operations of aarrelabel.live on a need-to-know basis. They must comply with confidentiality rules and, if necessary, other confidentiality agreements. Collected data will not be disclosed to third parties, unless required by law.

11. Right of inspection and right to demand correction
Every person in the register has the right to check their data stored in the register and demand correction of any incorrect data or completion of incomplete data. If a person wishes to check the data stored about them or demand correction, the request must be sent in writing to the controller. If necessary, the controller may ask the requester to prove their identity. The controller will respond to the customer within the time period stipulated in the EU Data Protection Regulation (generally within one month).

12. Other rights related to the processing of personal data
A person in the register has the right to request that personal data concerning him or her be deleted from the register ("right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain situations. Requests must be sent in writing to the controller. The controller may, if necessary, ask the person making the request to prove their identity. The controller will respond to the customer within the time period specified in the EU Data Protection Regulation (generally within one month).

 

Cookie Statement

This Cookie Policy was last updated on 27.2.2024 and applies to citizens of the European Economic Area and Switzerland.

1. Introduction
Our website https://aarrelabel.live (hereinafter: “Website”) uses cookies and other related technologies (for convenience, we refer to all technologies as “cookies”). Cookies are also set by third parties with whom we cooperate. In the document below, we explain the cookies used by our website.

2. What are cookies?
A cookie is a small, simple file that is sent with web pages and that your browser stores on the hard drive of your computer or other device. The information stored in it can be returned to our servers or the servers of relevant third parties upon your next visit.

3. What are scripts?
Script is a piece of programming code that allows our website to function properly and interactively. This code is executed either on our server or on your device.

4. What is a web beacon?
A web beacon (or pixel tag) is a small, invisible piece of text or image on a website that is used to track website traffic. This is done by storing various information about you using web beacons.

5. Cookies

5.1 Technical or functional cookies
Some cookies ensure that certain parts of the website function properly and that user preferences are remembered. By setting functional cookies, we make it easier for you to visit our website. This way, you do not have to repeatedly enter the same information when visiting our website and, for example, products remain in your shopping cart until you have paid. We may set these cookies without your consent.

5.2 Statistical cookies
We use statistical cookies to optimize our users' website experience. With these statistical cookies, we obtain information about the use of our website. We ask for your consent to place statistical cookies.

5.3 Advertising cookies
We use advertising cookies on this website, which allow us to obtain information about the results of the campaign. This is done based on the profile that we create based on your behavior on https://aarrelabel.live. These cookies link you as a visitor to the website to a unique ID, but these cookies do not determine your behavior and interests for the purpose of displaying personalized advertisements.

5.4 Marketing/Tracking Cookies
Marketing/Tracking Cookies are cookies or any other form of local storage that are used to create user profiles in order to display advertising or to track the user on this website or across multiple websites for similar marketing purposes.

Since these cookies are marked as tracking cookies, we ask for your permission to place them.

5.5 Social Media
We have included content from Facebook on our website to promote the website (e.g. "like", "pin") or share (e.g. "tweet") on social networks such as Facebook. This content is embedded with code from Facebook and sets cookies. This content may store and process certain information for personalized advertising.

Please read the privacy statements of these social networks (which may change regularly) to read what they do with your (personal) data that they process using these cookies. The information retrieved is anonymized as much as possible. Facebook is based in the United States.

6. Consent
When you first visit our website, you will see a pop-up window providing information about cookies. By clicking “Save”, you consent to us using the cookies and plug-ins you have selected in the pop-up window, which are presented in this cookie policy. You can disable cookies in your browser, but please note that our website may then no longer function properly.

7. Enabling/rejecting and deleting cookies
You can use your internet browser to automatically or manually delete cookies. You can also specify that certain cookies should not be set. Another option is to change the settings of your internet browser so that you receive a message each time a cookie is set. For more information about these options, please refer to the instructions in the Help section of your browser.

Please note that our website may not function properly if all cookies are disabled. If you delete cookies from your browser, they will be placed again after your consent when you visit our website again.

8. Your rights regarding personal data

You have the following rights regarding your personal data:

• You have the right to know why your personal data is needed, what happens to it and how long it is stored.
• Right of access: You have the right to access the data we hold about you.
• Right to rectification: You have the right to supplement, correct, erase or block your personal data at any time.
• If you give us your consent to process your data, you have the right to withdraw your consent and request the erasure of your personal data.
• Right to data portability: You have the right to request all your personal data from the controller and to transfer them in their entirety to another controller.
• Right to object: You may object to the processing of your data. We will comply with this unless there is a legitimate reason for the processing.

If you wish to exercise these rights, please contact us. See the contact details at the bottom of this Cookie Policy. If you have a complaint about how we process your data, we would like to hear from you, but you also have the right to lodge a complaint with a supervisory authority (data protection authority).

This cookie policy was synchronized with the cookiedatabase.org website on 1 April 2024.

Contact information

If you wish to exercise your rights under Regulation (EU) 2018/1725, if you have any questions, comments or concerns, or if you wish to lodge a complaint regarding the collection and use of your personal data, please contact the data controller:

Pumpkin Design Ltd
Haikanvuori 5 C 1
33960 PIRKKALA
FINLAND
Website: https://aarrelabel.live
Email: help@aarrelabel.live
Telephone number: +358 50 352 4280