Privacy Policy
Last updated: September 2026 • Compliant with EU General Data Protection Regulation (GDPR)
1. Introduction & Data Controller
RedKohl (“we”, “us”, or “our”) operates the e-commerce website redkohl.com. We are committed to safeguarding the privacy and personal data of our customers in Finland and across the European Union in full accordance with the EU General Data Protection Regulation (GDPR – Regulation EU 2016/679).
2. Personal Data We Collect
When you visit, browse, or make a purchase on our store, we collect the following categories of information:
- Identity & Contact Data: Full name, email address, phone number, and billing/shipping address.
- Order & Transaction Data: Items purchased, order value in EUR, delivery preferences, and payment status (we do not store full credit card numbers; payment data is processed securely by certified payment gateways).
- Technical & Usage Data: IP address, browser type, device information, and interaction with website pages to ensure site functionality and security.
3. Purpose and Legal Basis for Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Processing and fulfilling orders, shipping and delivery | Performance of contract (Art. 6(1)(b)) |
| Payment verification, fraud prevention and tax accounting | Legal obligation (Art. 6(1)(c)) |
| Customer care and inquiries | Legitimate interests (Art. 6(1)(f)) |
| Marketing newsletters (optional) | Consent (Art. 6(1)(a)) |
4. Data Sharing & Third Parties
We do not sell or rent your personal data. We only share necessary data with trusted service providers essential for business operations:
- Logistics Partners: Postal and courier services (Posti, Matkahuolto, DHL) to fulfill delivery.
- Payment Providers: Certified payment processors handling secure transactions.
- Hosting & Technical Infrastructure: Secure servers located within the EU / EEA.
5. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or reporting requirements under Finnish law.
6. Your Rights Under GDPR
As an individual in the European Union, you hold the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no overriding legal reason for retention.
- Right to Restrict or Object to Processing: Object to processing for direct marketing or specific legitimate interest purposes.
- Right to Data Portability: Request your data in a structured, machine-readable format.
7. Cookies Policy
Our website uses essential cookies for shopping cart operation, user session persistence, and security. Non-essential analytics or preference cookies are deployed only with your prior consent.
8. Contact Us
To exercise any of your privacy rights or if you have any questions regarding this policy, please contact our Data Protection Officer at:
Email: privacy@redkohl.com or support@redkohl.com
Website: https://redkohl.com