Calori.fi – Privacy Policy

This privacy policy describes how Calori Oy processes its customers' personal data on its website and in its services.

1. Data Controller

Lagom food Oy
Sörnäisten rantatie 27 A, 00500 Helsinki
Business ID: 3165571-2
Email: info@calori.fi
Phone: +358 40 369 2159

2. Registered Individuals

This register includes Calori.fi customers and users of the service.

3. Personal Data Collected

We collect and process the following data:

Name
Address
Email address
Phone number
Order content and delivery information
Cookie data and information related to website usage
Marketing preferences and consent records

4. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

Receiving, processing, and delivering orders
Providing customer service
Developing the service and customer experience
Fulfilling legal obligations

4.5. Email Communications

Essential service emails: We send order confirmations, delivery notifications, delivery confirmations, and important account updates based on legitimate interest as these are necessary for our service
Marketing emails: We send promotional emails about new meals, special offers, and wellness content only with your explicit consent
Feedback requests: We may include requests for service feedback in delivery confirmation emails to improve our service quality
Unsubscribe rights: You can unsubscribe from marketing emails at any time, but essential service emails cannot be disabled as they are required for service operations

5. Processing of Personal Data by Third Parties

We use a trusted third party to process order data. This party processes customers' names, addresses, and phone numbers solely for the purpose of delivering orders, according to Calori’s instructions.

The third party does not use the data for its own purposes and is committed to processing the data in accordance with data protection regulations.

6. Legal Basis for Data Processing

The processing of personal data is based on:

Contract performance (order processing, delivery notifications, account management)
Legitimate interest (service improvement, essential communications, feedback requests)
Consent (marketing communications, promotional emails)

7. Data Retention Period

Data is retained as long as necessary to fulfill its purposes or as required by law. Order and billing data is retained for at least 6 years in accordance with accounting legislation.

8. Rights of the Data Subject

The data subject has the right to:

Access their personal data
Request correction or deletion of their data
Object to or restrict the processing of their data
Receive their data in a portable format
File a complaint with the data protection authority
Withdraw consent for marketing emails at any time
Object to processing for direct marketing purposes

9. Cookies and Web Tracking

The website uses cookies for:

Technical functionality of the site
Improving customer experience
Statistical analysis (e.g., Google Analytics)

Users can manage cookie usage through their browser settings.

10. Data Security

To protect personal data, we implement appropriate technical and organizational security measures. Access to data is restricted to only those individuals and entities for whom it is necessary.

11. Changes to This Privacy Policy

We may update this policy as needed. Significant changes will be communicated to customers via our website or by email.