This Privacy Policy applies to the marketplace at pc.yasa.fi, operated by YASA LTD.
Controller Information
YASA LTD
Business ID: FI33819864
Fredrikinkatu 61 00100, Helsinki, Finland
Email: [email protected]
Data We Process
- Account data (name, email, login credentials).
- Order, payment, shipment and support data.
- Invoice and company data for VAT handling.
- Communication preferences and unsubscribe status.
- Operational logs needed for fraud prevention, uptime and security.
Legal Bases
- Contract performance: purchase, delivery, support and warranty handling.
- Legal obligations: accounting, taxation, consumer law requirements.
- Legitimate interests: abuse prevention, service reliability, diagnostics.
- Consent: optional analytics and marketing integrations where enabled.
Recipients and Processors
Data is shared only as necessary with service providers such as Stripe (payments), Yasa Nexus on Hetzner infrastructure (hosting), and messaging/email infrastructure. Transfers are limited to service delivery, compliance and security operations.
Email Routing and Internal Notifications
Essential transactional notifications (including order receipts, order status updates, and shipment notifications) are sent from [email protected] as a no-reply sender. Customer replies are routed to [email protected]. Internal copies of essential order notifications are also delivered to [email protected] for order operations and support continuity.
Bot Protection and Abuse Prevention
We use Google reCAPTCHA Enterprise to protect forms against abuse, bot traffic, and fraud attempts. Verification is risk-score based and is used for security controls, not for advertising profiling.
Retention
Order and accounting data are retained according to statutory requirements. Support and operational logs are retained only as long as needed for support quality, fraud prevention and legal obligations.
International Transfers
Where service providers process data outside your country, appropriate safeguards (including contractual and organizational protections) are applied.
Your GDPR Rights
- Right of access and data portability.
- Right to rectification and deletion where applicable.
- Right to restrict or object to certain processing.
- Right to lodge a complaint with a supervisory authority.
Security
We implement access controls, encrypted transport (HTTPS), role-based admin access, logging, and operational monitoring to protect personal data.
Contact and Requests
Send privacy or GDPR requests to [email protected] or use account support messaging where available.
Policy Updates
This policy may be updated to reflect legal, operational or product changes. Updated versions are published on this page.