Privacy Policy
1. Introduction
This Privacy Policy explains how Jasu Wonder World (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our website and participate in online art auctions.
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Finnish data protection laws.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide
- Full name
- Email address
- Phone number (asked at checkout for parcel deliveries, so the carrier can send the delivery notice by text message)
- Billing and shipping address
- Account login credentials
2.2 Transaction Data
- Bidding activity
- Purchase history
- Payment status (note: we do not store full payment details)
2.3 Technical Data
- IP address
- Browser type and device information
- Website usage data (via cookies and analytics tools)
3. How We Use Your Data
We process your personal data for the following purposes:
- To create and manage your user account
- To enable participation in auctions and process bids
- To process payments via Stripe and PayPal
- To send you the free coloring pages you request and, with your consent, occasional emails about new coloring pages, products and offers (you can unsubscribe at any time with the link in every email)
- To deliver purchased artwork
- To communicate important updates (e.g., auction results, payment reminders)
- To improve website functionality and user experience
- To comply with legal and regulatory obligations
4. Legal Basis for Processing (GDPR)
We process your data based on the following legal grounds:
- Contractual necessity – to provide auction services and fulfill purchases
- Legal obligation – to comply with tax and accounting laws
- Legitimate interest – to improve services, prevent fraud, and ensure platform security
- Consent – for optional communications (e.g., marketing emails)
5. Payment Processing
Payments are securely processed by third-party providers: Stripe and PayPal. These providers process your payment data in accordance with their own privacy policies. We do not store or have access to your full payment card details.
6. Data Sharing
We only share your personal data when necessary: with payment providers (Stripe, PayPal), with shipping partners (for delivery purposes), and with legal authorities when required by law. We do not sell your personal data to third parties.
7. International Data Transfers
Some of our service providers (e.g., Stripe, PayPal) may process data outside the European Economic Area (EEA). In such cases, appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) and adequacy decisions by the European Commission.
8. Data Retention
We retain your personal data only as long as necessary: account data is retained while your account is active; transaction data is retained for 6–10 years (to comply with Finnish accounting laws); marketing data is retained until you withdraw consent.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access – request a copy of your data
- Right to rectification – correct inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise your rights, contact us at: jasuwonderworld@gmail.com
10. Cookies and Tracking Technologies
We use cookies and similar technologies to ensure website functionality, analyze traffic and user behavior, and improve user experience. You can manage or disable cookies through your browser settings. With your consent we use Google Analytics (Google Ireland Ltd.) to measure how the shop is used (analytics cookies), and the Meta Pixel (Meta Platforms Ireland Ltd.) and TikTok Pixel (TikTok Technology Limited) to measure our ads and show our products to shop visitors on Facebook, Instagram and TikTok (marketing cookies). Meta and TikTok are only loaded after you allow marketing cookies. Google Analytics only sets cookies after you allow analytics cookies; before that (Google Consent Mode) it only sends anonymous, cookie-less signals without an identifier, and Google Ads measurement needs marketing consent. See the cookie policy; the legal basis is your consent (GDPR Art. 6(1)(a)), and you can withdraw it at any time via “Cookie settings” at the bottom of every page. For the marketing pixels we and Meta/TikTok are joint controllers for collecting and sending the data. See our Cookie Policy for more detail.
11. Data Security
We implement appropriate technical and organizational measures to protect your data, including secure (HTTPS) connections, restricted access to personal data, and use of trusted third-party providers. However, no system is completely secure, and we cannot guarantee absolute security.
12. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
14. Contact Information
For any questions or data protection requests: Jasmine Hintsala, Jasu Wonder World, Pohjavedenkatu 4 A 20, 00980 Helsinki, Finland. Email: jasuwonderworld@gmail.com
15. Right to Lodge a Complaint
If you believe your data has been processed unlawfully, you have the right to file a complaint with the Finnish Data Protection Authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), https://tietosuoja.fi
