Black Moda Ltd / Ratia.com Privacy Policy

EU General Data Protection Regulation (EU) 2016/679
Articles 12–14
PRIVACY POLICY
From 21.2.2025
Updated: 30.4.2025

 

1. General

Black Moda Ltd is committed to protecting your personal data in the Ratia.com online store. We process your personal data carefully and in accordance with the law. In this privacy policy, we explain what data we process and why, and how you can influence the processing of your data.

The processing of personal data is not outsourced to third parties. Using the Ratia.com online store requires acceptance of this privacy policy.

Controller:
Black Moda Ltd (Business ID 1034650-7)
Haikanvuori 5 C 1
33960 Pirkkala
FINLAND

Contact person for matters concerning the register:
Marko Keski-Vähälä
Black Moda Ltd
Haikanvuori 5 C 1
33960 PIRKKALA
posti@blackmoda.fi

 

2. What personal data do we collect?

Using the Ratia.com online store services, such as purchasing products from the Ratia.com website or, for example, handling a complaint, requires the use of personal data. If you decide not to provide us with your personal data, we will not be able to offer you all of our services.

Information provided by the user himself or herself, identifying the person:

• Identification information, such as the person's name
• The user's username when registering
• Company information (if the customer is a business customer)
• Contact information for order delivery, such as address, email address and telephone number, as well as the selected delivery method and delivery address
• Purchase transaction and transaction information, including ordered products and their price information
• In order to process your payment, we collect the necessary payment information, such as the payment method you have chosen and any invoicing information. If you choose Klarna's invoice as your payment method, Klarna may request your personal identification number for identification when concluding a credit agreement. This information is only processed in Klarna's system, and the information is not stored in the Ratia.com online store system
• Customer feedback
• Information about marketing permissions and prohibitions
• Information about browser version, device type and IP address. We may also collect information about your page loads, time spent on online services and movement within online services
• Benefits used, newsletters received (e.g. whether the message was opened)
• Product reviews
• Product recommendation and other information and identifiers used for targeted content

If the order is delivered to a person other than the subscriber, the following the recipient information provided by the user is stored:

• Identification information, such as the person's name
• Company name (if the order is for a company)
• Contact information, such as address, email address and telephone number

 

3. Purpose of processing personal data

Personal data is used to manage customer relations, provide and develop services and for marketing of the Ratia.com online store. We may also use the information to fulfill statutory obligations. Our direct marketing to consumers is always based on prior consent, which you can withdraw at any time if you wish.

The processing of personal data is based on the Personal Data Act:

• 8 §, subsection 1, points 5 and 7 (management of customer and stakeholder relationships)
• 19 § (direct marketing and similar mailings)

 

Purposes of Use

Orders
We use personal data to process orders, receive payments and deliver orders.

Online store customer register
We use the personal data you provide to manage your customer account. In the customer account, you can also view your order history, save your delivery addresses and manage your personal settings.

Customer service
We use personal data for purposes related to customer service and handling complaints.

Website development and user experience improvement
We use cookies and analytics to monitor the operation of the online store and improve the usability and customer experience of the service.

Fulfillment of legal obligations
We process data in accordance with, for example, the requirements of the Accounting Act and tax legislation.

Marketing and personalization
Personal data may be used to implement targeted marketing, campaign communications and customer communications. We use data for the following purposes, among others:

• Email marketing: We may send customers offers, newsletters, campaign information and reminders about unfinished shopping carts.
• Social media and digital advertising targeting: Based on the customer's online behavior and purchase history, we may target ads on social media, search engines and other websites.
• Personalized recommendations and content: We use user data to provide our customers with personalized recommendations on products, discounts and content.
• Customer surveys and satisfaction surveys: We may contact customers to get feedback on products and services, and to improve our operations.
• Remarketing and user tracking: Cookies and analytics tools allow us to track website user traffic and customize our marketing based on it.

You can withdraw your marketing consent at any time by contacting our customer service. You can also cancel our electronic newsletter by clicking the Unsubscribe link in the newsletter.

If you have not given your consent to direct marketing, we will only use your personal data to provide our services and manage our customer relationship. We will not send you direct marketing messages without your permission, but we may use information collected based on your online behavior to show you advertisements related to our brand and products on other websites.

We carry out remarketing through our partners and their publishing platforms using cookie technology. You can manage marketing cookies and prohibit their use in the cookie settings of our website. You can read more about cookies here. You can also decline marketing cookies when you visit our website if you wish.

In all processing of personal data, we ensure that it is justified and necessary for its intended purpose, in compliance with applicable data protection legislation.

 

4. Processing and protection of personal data

No paper printout of the online store's customer register is kept. The processing of personal data has not been outsourced to third parties.

The paper return form filled in by customers is kept for possible inspection and for processing feedback for a maximum of 2 months from arrival, after which it is destroyed in accordance with the Data Protection Regulation.

Only designated employees of Black Moda Ltd have access to personal data. Access to the register requires a username and password, as well as two-step authentication. Users are bound by a duty of confidentiality. Access to the customer register is only granted when it is necessary for work tasks.

Your personal data is stored electronically and appropriately protected from outsiders by physical locking, firewalls, passwords and other technical protection measures. The technical protection of the register against data hacking has been entrusted to a professional service provider. Each computer and server has security software. The network is protected by a firewall.

 

5. Cookies

We collect information about the use of our online services, for example, using cookies. A cookie is a small file that a website stores in your browser and that sends us information when you visit our site again. We use cookies on our website that work according to their purpose - they improve the user experience or monitor traffic on Ratia.com website. We may also use cookies for page targeting, personalization and advertising. We ask for your consent on the website to set cookies that are not necessary for the use of the site.

Cookies are divided into functional, i.e. essential cookies, analytics cookies and marketing cookies. Functional cookies are essential for the usability of the site. Necessary cookies enable various functions on our site, such as the shopping cart and registration. You can prevent functional cookies from being set in your browser settings, but this may affect the functionality of the site.

Analytics cookies allow us to measure site traffic and see traffic sources in larger data sets. They also help us understand which products are the most popular. Marketing cookies enable us to target advertising on our marketing partners' sites, which makes the advertising content as interesting as possible for you. If you do not accept marketing cookies, advertising will be more random.

 

6. Regular data sources

The main source of personal data is your own declaration or purchase and transaction information in the Ratia.com online store.

 

7. How long will my data be stored?

We store personal data only for as long as necessary to fulfill its purposes or as required by law. For example, order information is stored for at least six years after the end of the financial year in accordance with the Accounting Act.

 

8. Will my personal data be disclosed to third parties?

Personal data is not routinely disclosed to third parties, except for authorities and those partners whose services Black Moda Ltd uses, for example, for payment, collection, delivery and distribution of orders or customer service communications.

We also use personal data with third parties for analytics and personalization purposes. We use purchasing behavior and browsing data with partners so that we can better offer you products and offers that are of interest to you.

 

We forward information to the following third parties:

• Analytics and statistics partners
• Product recommendation and personalization partners
• Email marketing partners, if the customer has given permission for direct marketing
• Transport company
• Payment agent
• Invoice operator or credit provider when an invoice or installment payment is selected as the payment method
• Black Moda Ltd ensures a high level of data security and protection when transferring and processing data in accordance with the EU General Data Protection Regulation.

 

9. Transfer of data outside the EU

Ratia.com online store data is stored within the European Union. The service provider of the online store platform is a Canadian company, but the company has a separate contractual entity in Ireland that acts as the primary contractual entity with online stores located in the European Economic Area. The contractual entity located in Ireland also acts as the primary entity and responsible party in matters relating to the service provider's General Data Protection Regulation (GDPR). The service provider of the online store platform may transfer users' personal data to other units of the service provider and to trusted subprocessors to ensure the functionality of its services.

Transfers from Europe
Transfers of personal data outside the EEA are protected by:

• The European Commission's adequacy decision (e.g. transfers to Canada)
• Standard Contractual Clauses (SCC)
  
• Data Processing Agreements (DPA)

The e-commerce platform provider has also applied for Binding Corporate Rules to protect transfers.

Data storage and infrastructure
The e-commerce platform provider uses Google Cloud Platform in a decentralized manner and transfers data as needed to provide services. Data for European merchants is stored in Europe by default.

Selection of sub-processors
The e-commerce platform provider carefully selects partners and only uses a limited number of third-party service providers. Subprocessors must:

• Sign a comprehensive DPA (including SCCs)
• Use data only for technical purposes
• Adhere to high data protection and security standards

 

10. What rights do I have in relation to my data?

Right of access
The right to know why your personal data is needed, what happens to it and how long it is kept.

Right of inspection
Everyone has the right to check their data stored in the Ratia.com online store register. The controller has the right to check that the person checking the data is checking their own personal data and that it is not data snooping. The data will be provided without undue delay, in an intelligible form and, upon request, in writing. Inspection requests must be submitted to the person in charge of the register mentioned in section 1.

Right to request correction or deletion of data
You have the right to request correction, completion or deletion of personal data concerning you. We comply with this unless there is a legitimate reason for the processing. The processing of your personal data may be necessary, for example, to process an online order you have placed, in which case we cannot delete your data.

Data transfer
You can request that your data be transferred to another service provider.

Withdrawal of consent
You can withdraw your consent to data processing at any time and request that your data be deleted. You also have the right to prohibit the processing of your data for direct marketing purposes at any time. You can do so directly from our newsletter or by contacting our customer service. Despite the prohibition of direct marketing, you can still see our advertisements on external online services and continue to receive customer communications from us, such as an order confirmation regarding an order you have placed in the online store.

Right to complain
You have the right to file a complaint with a supervisory authority (in Finland: Data Protection Authority).

If you wish to exercise these rights, or if you have any questions regarding the processing of your data, please contact our customer service: posti@blackmoda.fi. In order to protect your personal data, we have the right to check that the person checking the data is checking their own personal data and that this is not data snooping.

 

11. Other rights related to the processing of personal data

According to 30 § of the Personal Data Act, the data subject has the right to prohibit the controller from processing information concerning him or her for the purposes of direct advertising, distance selling or direct marketing, as well as market and opinion research (30 § of the Personal Data Act).

 

Contacts

You can contact our customer service with questions regarding the processing of personal data and the privacy policy: posti@blackmoda.fi