We process all your personal data in accordance with the GDPR. You can read more about our privacy policy below.

1. DATA CONTROLLER

Wellen Beauty (“Wellen” or “we”) processes the personal data of online store customers to manage and process orders and deliveries, to manage customer relationships and for direct marketing purposes. We also process data about website visitors for trend detection and analytics. ​

 

It is important to us that you know how we use your data. This privacy policy aims to clarify how we process your personal data. ​

 

Please note that this privacy policy only applies to data processing activities that Wellen Beauty performs as a data controller. ​

 

Your payment service provider is the data controller for data related to payment transactions. The privacy policies of these service providers are available on their websites:

Klarna

 

2. CONTACT INFORMATION

Contact information for the data controller:

Wellen Beauty

info@wellen.fi

www.wellen.fi

 

Company:

77 Project Oy

3587570-4

Aarne Arvosen Kuja 2, Järvenpää, Finland

​We collect the following information from our registered users or online store customers:

• first and last name

• email address

• postal address

• phone number

• order and delivery history

• payment method

• possible communication history

• returns, complaints or claims

• direct marketing permissions or restrictions

• company name and business ID for business customers.

We may also process technical information about all website visitors that, in certain situations, can identify you and meet the definition of personal data, including the following:

• IP address

• operating system

• device type

• products searched for in the online store

• browsing history and URL path in the online store
  
  During the payment process, Klarna stores the IP address, payment method and the time and date of the payment.

We use cookies and similar technologies, such as beacons, to improve the usability and functionality of our website. We also use third-party cookies to collect analytics information and integrate our social media accounts with our website. ​

 

Cookies allow web applications to respond to you as an individual. A web application can tailor its functionality to your needs, likes and dislikes by collecting and remembering information about your preferences. ​

 

A cookie is a small text file that is stored on the user's computer. If you do not want cookies to be stored on your computer, you can block cookies in your browser settings. In this case, we cannot guarantee that our website will function in the best possible way. Our website uses Google Analytics. For more information about Google Analytics' privacy practices, please see the Google Analytics Privacy Policy.

Personal data may be used for the following purposes in accordance with the law and applicable consents:

Enable orders and deliveries

We process personal data to process, confirm and deliver orders. Personal data may also be processed in the event of a complaint or warranty regarding an order or product.

Customer Service and Customer Communications

Customer information may be used for customer service, communications and customer relationship management. If you contact our customer service, we will use the information provided to answer questions and resolve any issues.

Direct marketing and market research

If you have subscribed to our newsletter or otherwise expressed your desire to receive direct marketing material, we may process your personal data to send you direct marketing material, such as information about our products and current offers and events. With your consent, we may also contact you for market research purposes. For more information on the processing of personal data for direct marketing purposes, see DIRECT MARKETING. You always have the right to object to electronic direct marketing.

Legal basis for processing personal data

We process personal data to perform our contractual obligations towards you or to facilitate pre-contractual measures. In some cases, we process personal data to comply with our legal obligations, for example, when we are required to retain order and transaction data for accounting purposes. We also process personal data based on your consent, where you have given your consent to the processing of your personal data, and based on our legitimate interests to maintain and develop our business, for example, to collect website analytics data.

​

RETENTION PERIOD

We do not retain personal data for longer than is legally permitted or necessary to fulfill the purposes set out above. The retention period depends on the nature of the data and the purposes for which it is processed. The maximum period may therefore vary depending on the purpose of the data. The retention periods reflect the time that is reasonably necessary for our legitimate interests, for example, for handling complaints, internal reporting, marketing and mediation. Due to accounting legislation, we are also required to retain all material related to transactions for the period specified by law. We retain analytics data related to the services for 36 months.

​

INTERNATIONAL TRANSFERS OF PERSONAL DATA

We primarily store personal data within the European Economic Area. However, in some circumstances we may transfer personal data for processing outside this area. In these cases, we will ensure that your data is adequately protected in the jurisdictions where it is processed.

​

RECIPIENTS OF PERSONAL DATA

We will not share your personal data with third parties outside the Wellen Beauty organization unless one of the following conditions is met:

It is necessary for the purposes described in this Privacy Policy

To the extent that third parties need access to personal data for the purposes mentioned above, we have taken appropriate contractual and organizational measures to ensure that personal data is processed exclusively for the purposes specified in this Privacy Policy and in accordance with applicable laws and regulations.

For Legal Reasons

We may share personal information with third parties outside the Wellen Beauty organization if access to personal information is reasonably necessary to: (i) comply with applicable law, regulation and/or court order; (ii) detect, prevent or otherwise address fraud, identity theft, money laundering, terrorist financing or information security or technical difficulties; or (iii) protect other public interest interests as required by law.

To Authorized Service Providers

We may share personal information with authorized service providers, such as a service provider responsible for transportation services. Our agreements with our service providers include commitments that require service providers to limit their use of personal information and to comply with the privacy and security standards of this Privacy Policy.

For other legitimate reasons

If Wellen Beauty is involved in a merger, acquisition or asset sale, we may transfer personal information to the party involved. However, we will continue to ensure the confidentiality of all personal information. We will notify you when personal information is transferred or becomes subject to a different privacy policy as soon as reasonably possible.

With your consent

We may share personal information with third parties outside the Wellen Beauty organization for reasons other than those mentioned above, when we have obtained your express consent. You have the right to withdraw such consent at any time by contacting us.

​

RECIPIENTS OF PERSONAL DATA

Right of access

You have the right to access your personal data processed by Wellen Beauty. You can contact us to find out what personal data we process and for what purpose we use it.

Right to rectification

You have the right to correct any personal data we have stored that is incorrect, inaccurate, incomplete, outdated or unnecessary. You can contact us to update, for example, your contact details or other information.

Right to erasure

You can ask us to erase your personal data. We will comply with your request unless we have a legitimate reason not to erase the data. Such a legitimate reason may include, for example, an obligation to retain certain information due to accounting legislation or a requirement to retain order information to verify your product warranty.

Right to object and right to restriction

You have the right to object to the processing of your personal data or profiling if your data is processed for direct marketing purposes. You have the right to request the restriction of the processing of your personal data, including where your data is incorrect. In addition, in certain specific situations, you have the right to object to the processing of your personal data on grounds relating to your particular situation.

Right to data portability

You have the right to receive your personal data from us in a structured and commonly used format and to transmit the data to a third party independently.

Exercising your rights

If you wish to exercise any of the above rights, please send us a secure email with the following information: name, address, telephone number and a copy of a valid ID. We may request additional information to verify your identity. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

​

DIRECT MARKETING

If you have given your consent to receive direct marketing, for example by subscribing to a newsletter, we may send you notifications about our products, offers and events. You have the right to prohibit us from using your personal data for direct marketing, market research or profiling by contacting us via the contact details above or by using the opt-out option included in any direct marketing communications.

​

DATA SECURITY

We have implemented administrative, organizational, technical and physical security measures to protect the personal data we collect and process. Our security measures are designed to maintain an appropriate level of confidentiality, integrity and availability of the data. Access to personal data is limited to authorized persons who need the information to perform their job duties. Personal data is protected by appropriate access rights, user rights and passwords. If, despite our security measures, a data breach occurs that is likely to negatively affect your privacy, we will notify you and other interested parties and, where applicable, the relevant authorities of the breach as soon as possible. ​

 

LOOKING A COMPLAINT

You have the right to lodge a complaint with a supervisory authority if you consider that Wellen Beauty’s processing of your personal data does not comply with applicable data protection legislation. ​

 

Last updated: 1.2.2026