Privacy notice
Version 1.0 – valid from 30 October 2026
1. Who is responsible
Texus Oy (business ID 3428904-1), Åkerlundinkatu 8, 33100 Tampere, Finland, is the controller of the personal data described here. Contact for privacy matters: sales@texus.fi, +358 44 248 8399.
2. What we process, why and for how long
| Purpose | Data | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Customer account and login | Name, e-mail, password (stored encrypted); Google account ID if you sign in with Google | Contract (6(1)(b)) | While the account exists; accounts not used for 3 years are deleted |
| Orders, delivery and invoicing | Name, address, phone, e-mail, company name, business ID and VAT number, order contents | Contract; legal obligation under accounting law (6(1)(c)) | 6 years from the end of the year of the order |
| Payment | Payment status and transaction details; we do not see your card details | Contract; legal obligation | As order records |
| VAT number check | Company VAT number and the result of the EU VIES check | Legal obligation | As order records |
| Customer service, returns and complaints | Messages, return and complaint records | Contract; legitimate interest in handling claims (6(1)(f)) | 3 years |
| Sellers and tax reporting (DAC7) | Seller company details, contact person, tax and VAT numbers, bank account, sales figures | Contract; legal obligation | 6 years from the end of the year |
| Product information tools for sellers | Photos, texts and files sellers upload | Legitimate interest in listing products quickly | Logs 12 months |
| Security and bot protection | IP address and browser signals | Legitimate interest in keeping the site secure | As set by Google reCAPTCHA |
| Visitor statistics | Cookie ID, pages visited | Consent (cookie banner) | 14 months |
3. Who receives data
- Partner Sellers who ship your order receive your name, delivery address and phone number. They use them only to deliver the order, on our behalf.
- Posti and other carriers: to deliver the order.
- Payment providers: Stripe (card payments), Vipps MobilePay (MobilePay) and your bank for bank transfers.
- Service providers working for us: Hostinger (hosting), Briox (invoicing), CookieYes (cookie consent), Google (Sign in with Google, reCAPTCHA, and Analytics if you consent), Anthropic (AI tools that help sellers fill in product information).
- Authorities, when the law requires it, for example the Finnish Tax Administration (DAC7 reporting of sellers). VAT numbers are checked in the EU VIES service.
We do not sell personal data.
4. Transfers outside the EU
Google and Anthropic may process data in the United States. These transfers are based on the European Commission’s Standard Contractual Clauses and, where the provider is certified, on the EU–US Data Privacy Framework.
5. Your rights
You can ask for access to your data and for correction, erasure or restriction of processing. You can object to processing based on legitimate interest, and ask to receive data you gave us in a machine-readable format. You can withdraw your consent to cookies at any time in the cookie settings. You can complain to the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the data protection authority of your country of residence, for example IMY in Sweden.
6. Do you have to give us data?
Data needed for an order is required to make and deliver it. Business buyers must give a business ID; a VAT number is needed to buy without VAT from another EU country. Sellers must give the tax reporting data the law requires.
7. Automated decisions
We do not make decisions about you based only on automated processing. Price suggestions and AI-filled product data are suggestions; a person decides.
8. Changes
We update this notice when our processing changes. The version at the top shows the current one.