Privacy Policy

This privacy policy contains information in accordance with the EU General Data Protection Regulation (GDPR) on how we process your personal data.

1. Data Controller

Company: Costa Shield Films / Mark Art (Business ID: FI25383263)
Address: Aukeankatu 8, 15610 Lahti, Finland
Email: markus@costashield.com
Phone: +358 400 130 050

2. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

  • Sending newsletters and marketing communications
  • Managing customer relationships and communication
  • Delivering and processing online store orders
  • Marketing and providing information about our services

The legal basis for processing is a contract related to the customer relationship or order, the legitimate interest of the controller (such as customer relationship management and direct marketing), or your consent (such as subscribing to the newsletter).

3. Regular Sources of Data

Personal data is primarily collected directly from the users themselves (for example, in connection with a newsletter subscription, contact form, or online store order). Data may also be obtained and updated from public and open registers.

4. Personal Data Collected

Only data necessary for the purpose of processing is collected and stored in the register:

  • Name
  • Email address
  • Phone number

5. Data Retention Period

Your personal data will only be kept for as long as necessary to fulfill the purposes defined in this policy. Data related to newsletter subscriptions is stored for as long as the newsletter subscription is valid. If you cancel your newsletter subscription, your data will be removed from the mailing list. Data related to customer relationships and orders is retained for as long as required by legislation (e.g., accounting laws) or the management of the customer relationship.

6. Disclosures and Transfers of Data

Your data will not be sold or disclosed to third parties for commercial purposes. We use trusted service providers for the technical processing of data. Newsletters are created and sent using the Hostinger service, where the data is stored securely.

Data is not transferred outside the European Union (EU) or the European Economic Area (EEA).

7. Rights of the Data Subject

In accordance with GDPR legislation, you have the following rights regarding your data:

  • Right of access: You have the right to know what data we have stored about you.
  • Right to rectification: You can request us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): You can request the deletion of your data from our register if there is no longer a legal basis for processing.
  • Right to withdraw consent: If the processing of your data is based on consent (such as a newsletter subscription), you can withdraw your consent at any time via the unsubscribe link in the newsletter or by contacting us.
  • Right to object or restrict processing: You can object to the use of your data for direct marketing.
  • Right to lodge a complaint: If you believe that the processing of your personal data violates the Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority (in Finland, the Office of the Data Protection Ombudsman).

If you wish to exercise your rights, you can contact the email address mentioned in section 1.

8. Changes to the Privacy Policy

We reserve the right to update this privacy policy due to, for example, the development of our services or changes in legislation. The date of the last update will always be marked at the top or bottom of the policy.

This policy was last updated on: 9.10.2026