Privacy statement

Privacy statement

A warm welcome to Marimekko's data protection site! Marimekko is committed to protecting the privacy of its customers and other stakeholders. In this privacy policy, we describe how Marimekko processes the personal data of customers, website and store visitors, as well as other stakeholders. It includes information on what data we process, for what purposes, and how you can influence the processing of your personal data.

Starting from 25 October 2023

1. WHEN DO WE COLLECT YOUR DATA?

We collect your personal data when you:

  • visit or shop on our website or in our store,
  • register in our community program and subscribe to our newsletter,
  • give us a permission for direct marketing,
  • participate in our marketing campaigns, market surveys, opinion polls, or other events organized by us,
  • communicate with us through our customer service or social media channels,
  • share, publish or comment on content on our social media channels.

We collect much of the data directly from you when you shop on our website or become a member of our community program. We may also collect and process data on you in connection with your use of our website or other services. In addition, we may use public registers or update services to collect and process address and status information.

2. HOW DO WE PROCESS YOUR DATA?

We process your personal data in order to provide you with our products and services in the best possible way. We also want to create an effortless shopping experience and enhance the use and maintenance of our website and other services. We process your data for the following purposes:

Product and service orders

If you have reserved or purchased products or services from our website or store, we will use your data to process your reservation or purchase order and in case of possible returns or claims.

Processed dataBasis for processing
  • Name and contact information
  • Information about your purchases, payment methods, deliveries, returns, claims and reservations 
  • Performance of a contract
  • Compliance with a legal obligation
How long do we store the data?
For as long as it is necessary, for example, to defend a legal claim or to comply with accounting and other legal obligations.

Community program

If you have registered for our community program, we will use your data to administer the community program, provide benefits and services related to the program, and inform you about changes.

Processed dataBasis for processing
  • User account credentials (such as user ID) and registration date
  • Other information that you provide, such as date of birth, language and country, and your personal interests
  • Information about the benefits, services and promotions we offer you and how they are used
  • Updated contact and other information from delivery service providers, update services or public registers
  • Information about your interests (in addition to information you provide directly, we may derive your interests from other data that we collect, such as newsletters based on whether the newsletter you have received has been opened and what other actions have been taken on the content)
  • Performance of a contract
  • Marimekko’s legitimate interest (conducting the company's business, improving customer experience and targeting direct marketing)
How long do we store the data?
We delete the data as soon as possible after your membership in the community program ends.

Customer service and safety

We process your data to provide customer service, such as responding to your feedback, claims or other messages for example in our social media channels, and to conduct customer satisfaction surveys. We may also record calls to customer service, which will always be notified to you in advance. By collecting CCTV recordings, we also want to ensure your safety.

Processed dataBasis for processing
  • Your contact with our customer service and other communications with you, for example in social media channels
  • CCTV recordings from cameras placed in our stores and other facilities
  • Call recordings when you contact our customer service
  • Your responses to our customer satisfaction surveys
  • Performance of a contract
  • Compliance with a legal obligation
  • Marimekko’s legitimate interest (conducting the company's business, improving customer experience)
How long do we store the data?
Until the contact has been processed, any claim period has expired, and Marimekko's legal liability has been clarified and completed.

Marketing and personalization

We process your data to market our products and services. We may carry out electronic direct marketing if you have given your consent to it. We may also analyze your interests in order to market products and services that are as interesting to you as possible. In addition, we may process your personal data in order to optimize our website, product recommendations, and product collection to better match your preferences. To do this, we may create an account (which may be a guest account for non-logged in users) based on the information you provide and the information we collect in accordance with this privacy policy. For example, information about whether you have opened emails we send you and clicked links in them may be stored in your account.

Processed dataBasis for processing
  • Direct marketing consents and other permissions given by you
  • The browser, operating system, device model, IP address, connection time and duration of connection you use in connection with our website or other online service, the web pages through which you came to our site, the pages you view on our site, and any other analytics information (such as the choices you make and search terms you use), cookies and other identifiers
  • Data we receive from third parties that complements the data we process in accordance with applicable laws
  • Marimekko’s legitimate interest (conducting the company's business, improving customer experience and targeting direct marketing)
  • Consent if needed
How long do we store the data?
Until the marketing consent has been revoked. The data of customers in our community program is stored as described above. We store browser and server based tracking data in accordance with our cookie policy.

Market surveys and opinion polls

The development of our products and services is of paramount importance to us. If you participate in one of our market surveys or opinion polls, for example on our website, we process your data in order to better understand our customers and thus offer better products and services.

Processed dataBasis for processing
  • Your participation and information in market surveys or opinion polls
  • Marimekko’s legitimate interest (conducting the company's business, and improving customer experience)
  • Consent if needed
How long do we store the data?
Until the survey or poll has ended and its purpose has been fulfilled.

Events, campaigns, sweepstakes, competitions, and social media posts

We may use your data to organize events and promotions to identify you and ensure your participation. If you participate in a sweepstakes or competition, we may process the data you provide for the purpose of organizing and administering the sweepstakes or competition and, if you are a winner, communicating with you.

Processed dataBasis for processing
  • Your participation and the data you provide in our marketing campaigns and events
  • Photos and video recordings of our events (if we photograph you specifically, we will ask for your consent to publish the photo)
  • If you have connected to our website, social media channel or other service using your social media profile, we may collect public information available on that profile
  • Your clothing and shoe size for casting events
  • Marimekko’s legitimate interest (conducting the company's business, and improving customer experience)
  • Consent if needed
How long do we store the data?
Until the event, campaign, sweepstakes or competition has ended, and subsequent actions have been completed.

Regulatory compliance 

Where necessary, we process your personal data to prevent fraud and to comply with applicable laws (such as trade sanctions and anti-bribery laws).

Processed dataBasis for processing
  • Information from public registers maintained by public authorities, if such registers are available in your country
  • Updated contact and other information from delivery service providers, update services or public registers
  • Information we receive from third parties that complements the information we process, in accordance with applicable laws
  • Compliance with a legal obligation
  • Marimekko’s legitimate interest (conducting the company's business)
How long do we store the data?
For as long as necessary, for example, to defend a legal claim or to comply with accounting and our other legal obligations.

Marimekko does not collect your payment information. All payment information is securely processed by authorized third-party payment service providers.

3. WHEN IS YOUR DATA DISCLOSED TO OTHERS

We may disclose your personal data to companies belonging to the Marimekko group. In addition, we use external service providers in the processing of your personal data. We oblige such service providers contractually to ensure a sufficient level of data security to protect your personal data and to comply with applicable laws. These service providers may act as processors of personal data, in which case we commit them not to use your data for their own purposes, but they may also act as separate controllers, for example with regard to personal data required for payment transfers, deliveries, and targeted marketing. We may also disclose personal data in the community program to third parties that operate Marimekko stores. Such a third party acts as the joint controller of Marimekko's community program.

We may also disclose your data to authorities if we are required by law to do so, for example if it is necessary to prevent or investigate fraud or other illegal activities. We may also disclose your data to other parties by order of a competent court. In addition, we may disclose your data in connection with a possible sale of business or other corporate transaction to the buyer of the business or other relevant party related to the transaction.

If we transfer your personal data outside the EU/EEA, we will ensure that there is an appropriate legal basis for the transfer and that the data processing and data security comply with the requirements of applicable laws.

4. HOW DO WE PROTECT YOUR PERSONAL DATA

We have implemented appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or access, and other unlawful or unauthorized processing. Security measures include, for example, keeping software versions of our systems up-to-date, security solutions for our communications networks, multi-factor authentication solutions, and storing physical documents in locked and fire-resistant facilities. In addition, the databases and their backups can only be accessed by certain persons, all persons processing personal data must have personal authorization, only our specifically authorized employees or authorized third parties have access to our premises or the right to process the data, and anyone who is granted access to personal data is obliged to keep it confidential. Access levels depend on the type of data required for access to or processing of data by the person's job description. In addition, we regularly communicate and train our personnel on data protection.

5. YOUR RIGHTS

You can influence the processing of your personal data in the following ways:

  • You may choose not to provide us with your personal data: Some features of our websites and other services may not be available to you unless you provide us with your personal data (for example, we may not be able to process your order without the necessary information).
  • You have the right to access your data: You have the right to request access to your personal data or copies thereof by contacting our customer service. You can also obtain information about their type, processing and disclosure.
  • You can withdraw your consent to direct marketing: You can withdraw your consent to direct marketing at any time. All our marketing messages include an unsubscribe link. If you withdraw your consent, we will promptly update our database and no longer send direct marketing messages. However, we may still contact you if it is necessary, for example because of the products or services you have ordered.
  • You can withdraw your other consent: In addition to direct marketing, you can withdraw your consent to other processing of personal data at any time by contacting our customer service. If you withdraw your consent, we may still process your personal data on other legal grounds, for example to comply with applicable laws. However, please note that your community program account will be deleted and the benefits you received through your account will be reset. The withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.
  • You can review and edit your personal data: If you have a community program account, you can edit your personal data yourself. If you do not have an account, you can contact our customer service, who will correct or delete any incorrect, unnecessary, or outdated data or complete the missing data at your request.
  • You can block cookies and delete cookies: You can choose which cookies you accept, and change your choices later. You can find more information in our cookie policy.
  • You can request the erasure or restriction of processing of your data: If you believe that your personal data is inaccurate or incorrect, that the processing is not lawful, that we process your data contrary to the purpose of the processing, or if you wish to object to the processing, you can contact our customer service and request that the data be erased or restricted. We will investigate your request as soon as reasonably possible before deciding on further action.
  • You can object to the processing of your data: You may have the right to object to the processing of your personal data on a justified basis. Please contact our customer service if you wish to object the processing of your personal data.
  • You can request the portability of your data to another service provider: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and, if you wish, to transmit that data to another controller.
  • You can lodge a complaint with a supervisory authority: If you believe that we are processing your personal data in a way that violates your legal rights, you can lodge a complaint with your local supervisory authority. A list of the websites of the supervisory authorities is available here.

Please note that when exercising the rights listed above, you may be asked for additional information to verify your identity. Such additional information will not be used for any other purpose and will be deleted once your identity has been verified.

6. CONTACT INFORMATION

Controller: Marimekko Corporation, business ID 0111316-2
Data protection officer: Essi Weseri 

If you have a request, notification, or any other question regarding the processing of your personal data, you can contact us in the following ways:

  • By sending an email to privacy@marimekko.com
  • By calling our customer service at +3589 758 7260 (local network charge/mpm or international call charge), which is open on weekdays from 8 am to 6 pm and on Saturdays from 10 am to 4 pm
  • By contacting our customer service via the chat service on our website. The chat service is open on weekdays from 8 am to 9 pm and on Saturdays and Sundays from 10 am to 6 pm (excluding public holidays).

7. AMENDMENTS

We may amend this privacy policy from time to time. When we publish changes, the effective date at the beginning of this policy will change to the effective date on which the changes take effect.