Privacy Policy
This Privacy Policy explains how SPH Trading Oy processes personal data relating to company representatives, contact persons and other users of the SLURREX website and B2B online store.
DATA CONTROLLER
SPH Trading Oy · Business ID 3102656-1 · Mannerheimintie 134, 00270 Helsinki, Finland · info@slurrex.com
PERSONAL DATA WE PROCESS
We may process the contact person’s name, work email address, phone number, role and company; company billing and delivery details; Business ID and VAT number; order history, products, prices, invoices, payment status and shipping details; customer-service and warranty communications; and technical data such as IP address, browser, device, security logs and cookie choices.
Payment card and online-bank credentials are entered into the payment service provider’s system and are not stored by the SLURREX online store.
SOURCES OF DATA
Data is received from the person placing an order or contacting us, from the buyer’s company, from payment and delivery partners, and automatically from the website where necessary for security, functionality and consented analytics.
PURPOSES AND LEGAL BASES
We process personal data to manage B2B orders and customer relationships, collect payments, deliver products, provide customer service, handle warranty and defect claims, prevent fraud, maintain website security, comply with accounting and tax obligations, and establish or defend legal claims.
The legal bases are SPH Trading Oy’s legitimate interests in managing and performing contracts with business customers, compliance with legal obligations, and consent where required for optional cookies or electronic marketing. A person may withdraw consent at any time without affecting processing carried out before withdrawal.
RECIPIENTS AND SERVICE PROVIDERS
Personal data may be disclosed or made available only as necessary to payment providers such as Paytrail and any payment method provider selected by the buyer; WooCommerce, website hosting and technical service providers; Shipit and the selected carrier; accounting, invoicing and professional advisers; and authorities where required by law. Service providers process data under their own legal obligations or under agreements with SPH Trading Oy, depending on their role.
INTERNATIONAL TRANSFERS
If a service provider processes personal data outside the EU or EEA, SPH Trading Oy uses a lawful transfer mechanism such as an adequacy decision or the European Commission’s standard contractual clauses, together with appropriate safeguards where required.
RETENTION
Order, invoice and accounting data is retained for the period required by Finnish accounting and tax law. Customer-service, warranty and contract data is retained for as long as necessary to manage the customer relationship and possible legal claims. Technical logs are retained only for the period necessary for security and troubleshooting. Marketing data is retained until consent is withdrawn or the data is no longer needed. Data is then deleted or anonymised unless continued retention is required by law.
DATA SUBJECT RIGHTS
Depending on the circumstances, a person has the right to access their personal data, request correction or deletion, restrict processing, object to processing based on legitimate interests, receive portable data where applicable, and withdraw consent. A request may be sent to info@slurrex.com. SPH Trading Oy may need to verify the requester’s identity and will respond within the period required by law.
A person may lodge a complaint with the Office of the Data Protection Ombudsman in Finland if they believe their personal data has been processed unlawfully.
AUTOMATED PROCESSING
SPH Trading Oy does not make decisions producing legal or similarly significant effects solely by automated processing. Payment or financing providers may perform fraud prevention, identity or credit checks under their own terms and privacy notices.
SECURITY
SPH Trading Oy uses appropriate technical and organisational safeguards to protect personal data. Access is limited to persons and service providers who need the data for their work and are subject to confidentiality or contractual duties.
CONTACT AND UPDATES
Questions and privacy requests may be sent to info@slurrex.com. This policy may be updated when services, providers or legal requirements change. The current version and effective date must be shown on the website.
