Privacy policy

The online store Cebowigs on the website Business ID number 3367411-6 located in Finland processes the personal data provided by the customer that fulfills and confirms the terms of use, the processing of electronic orders and deliveries, and the necessary transmission of information within the time required by law.

General provisions

1. The controller of personal data that complies with the GDPR regulation (hereinafter referred to as the "regulation") is Cebowigs, business ID number 3367411-6, located in Finland (hereinafter referred to as the "Controller");

2. The controller's contact information is: email:;

3. Personal data is all information related to an identified or identifiable natural person.

Source of personal data

1. The controller processes the personal data received with the customer's consent, which has been collected by contract in order to obtain and fulfill the electronic order of the online store;

2. The controller only processes the customer's identification and contact information, which are necessary to fulfill the purchase contract;

3. The controller processes personal data for delivery and accounting purposes, as well as for the time required by law to transmit the information needed by the parties to the contract. Personal data will not be made public or transferred to other countries.

Purpose of data processing

The controller processes the customer's personal data for the following purposes:

1. Registration of the website in accordance with Chapter 4 Section 2 of the GDPR;

2. Electronic order created by the customer (name, address, e-mail, phone number);

3. Comply with the law and regulations resulting from the contractual relationship between the customer and the controller;

4. Personal information is necessary to fulfill the purchase contract. A contract cannot be concluded without personal information.

Duration of personal data storage

1. The controller stores personal data as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the controller and the customer and for three years after the termination of the contractual relationship;

2. The controller must delete all personal data after the time required to store personal data.

Recipients and processors of personal data

The third parties that process the customer's personal data are subcontractors of the controller. The services of these subcontractors are necessary so that the agreement on the acquisition and processing of the electronic order in the contract between the controller and the customer can be implemented.

The subcontractors of the controller are:

  • Webnode AG (online store platform);
  • Freight company;
  • Google Analytics (website analytics)

Customer rights

In accordance with the regulation, the customer has the right to:

1. the right to access personal data;

2. the right to rectification of personal data;

3. the right to delete personal data;

4. the right to object to the processing of personal data;

5. the right to data portability;

6. the right to withdraw consent to the processing of personal data in writing or by email to:;

7. the right to submit a complaint to the supervisory authority if a violation of the regulation is suspected.

Security of personal data

1. The controller undertakes to implement all technical and organizational precautions necessary to protect personal data.

2. The controller has taken technical precautions to secure data storage facilities, in particular ensured access to the computer with a password, used anti-virus software and maintained the computers regularly.

Final provisions

1. By placing an electronic order on the website, the customer confirms that they are aware of all personal data protection terms and accepts them in full;

2. The customer accepts these rules by checking the box in the order form;

3. The controller may update these rules at any time. A new, updated version must be published on this website.

These rules enter into force on 16 October 2023