Privacy policy.
This policy explains what information the KumaKart website collects, why, and the rights you have over it. Our apps each have their own separate privacy policies.
01Who we are (the controller)
KumaKart Oy is the data controller responsible for the personal data processed through this website.
We have not appointed a separate Data Protection Officer. For any privacy matter, contact us at the address above.
02What data we collect
The website is intentionally simple. We do not run accounts, forms, newsletters, or advertising on it. We collect only:
- → Standard server logs. When you visit, our hosting provider automatically records technical data such as your IP address, browser type and version, the pages requested, and the date and time. This happens for every website on the internet and is needed to deliver and secure the site.
- → Email you send us. If you email info@kumakart.com, we receive your message and email address so we can reply.
We do not collect sensitive personal data through the website, and we do not use it to build profiles or track you across other sites.
03Cookies
We use only essential cookies and local storage — the small amount needed for the site to work the way you expect:
- → Remembering your language choice (EN / FI).
- → Remembering your cookie consent choice so we don't ask again.
We do not use analytics, advertising, or third-party tracking cookies. Because these cookies are strictly necessary, the site works the same whether you accept or decline. You can clear them at any time in your browser settings, and reopen the cookie notice via "Cookie settings" in the footer.
04Why we process it & our legal basis
- → Operating and securing the website (server logs) — our legitimate interest in providing a reliable, safe service. GDPR Art. 6(1)(f).
- → Replying to your messages — our legitimate interest in answering enquiries you choose to send us. GDPR Art. 6(1)(f).
- → Essential cookies — necessary for a service you have requested; consent is not required for strictly necessary cookies.
05Who we share it with
We do not sell your data and we do not share it for advertising. We rely on one service provider that processes data on our behalf:
- → Hostinger — website hosting and server logs.
We may also disclose data if required by law or to protect our legal rights.
06How long we keep it
Server logs are kept for 90 days for security and troubleshooting, then deleted or anonymised. Emails are kept for as long as needed to handle your enquiry and any follow-up, after which they are deleted.
07Where your data is held
Your data is stored within the EU/EEA. Our hosting provider, Hostinger, keeps the website's data on servers located in the EU/EEA, so it is not transferred outside the European Economic Area. Should this ever change, we would put appropriate safeguards (such as the European Commission's Standard Contractual Clauses) in place and update this policy.
08Your rights
Under the GDPR you have the right to:
- →Access the personal data we hold about you.
- →Have inaccurate data corrected.
- →Have your data erased ("right to be forgotten").
- →Restrict or object to processing.
- →Receive your data in a portable format, where applicable.
To exercise any right, email info@kumakart.com. You also have the right to lodge a complaint with the Finnish supervisory authority, the Office of the Data Protection Ombudsman (tietosuoja.fi).
09Changes to this policy
If we change how the website handles personal data, we will update this page and revise the "last updated" date above. Significant changes will be made clear on the site.
10Contact
Questions about this policy or your data? Email info@kumakart.com — we usually reply within a working day.