PRIVACY NOTICE

PRIVACY NOTICE

Last updated: 29 September 2026

This Privacy Notice explains how blind huck Oy, operating under the brand VisualGoods.store, processes personal data.

This Privacy Notice has been prepared in accordance with the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Finnish Data Protection Act (1050/2018).

DATA CONTROLLER

blind huck Oy, operating under the brand VisualGoods.store
PL 999
42011 Yrityslokero
Finland
Business ID: 3390334-5

PRIVACY CONTACT

Contact person: Anna Korvenranta
Email: info@visualgoods.store

Questions and requests concerning personal data or this Privacy Notice can be sent to the email address above.

WHO THIS PRIVACY NOTICE APPLIES TO

This Privacy Notice applies to personal data processed by blind huck Oy in connection with VisualGoods.store, including personal data relating to:

customers and potential customers
representatives, employees and other contact persons of customer and partner organizations
people contacting us or requesting information
people participating in video, photography and other productions
website and online store visitors
marketing and newsletter subscribers
suppliers, freelancers, subcontractors and other business contacts.

In some productions, blind huck Oy may process personal data on behalf of a customer where the customer determines the purposes for which the personal data is processed. In such cases, the customer may act as the data controller and blind huck Oy as a data processor for that processing.

Where blind huck Oy determines the purposes and means of processing, including the management of its own customer relationships, business operations and its own marketing and reference use, blind huck Oy acts as the data controller.

PERSONAL DATA WE MAY PROCESS

Depending on the relationship and situation, we may process the following categories of personal data:

name
company or organization
job title or position
contact details, such as email address, telephone number and postal address
customer, order and project information
information relating to offers, agreements and other business arrangements
invoicing and payment-related information
communications, inquiries, feedback and other correspondence
marketing preferences, subscriptions and opt-out information
photographs, video recordings, audio recordings and other production material in which a person may be identifiable
information relating to participation in a production or event
website and online store usage information, such as IP address, device and browser information, cookie identifiers and analytics data
other information voluntarily provided to us or necessary for the relevant customer relationship, project or service.

We do not seek to collect more personal data than is reasonably necessary for the relevant purpose.

PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA

We process personal data only where we have an appropriate legal basis for doing so.

Personal data may be processed for the following purposes:

Customer relationships, inquiries and business communications

We process personal data to respond to inquiries, communicate with customers and potential customers, manage business relationships and coordinate projects.

For representatives and contact persons of companies and other organizations, processing is generally based on our legitimate interest in conducting and managing our business relationships and providing our services.

Where processing is necessary to enter into or perform a contract directly with an individual, processing may also be based on the performance of a contract or steps taken at the individual’s request before entering into a contract.

Orders and production projects

We process personal data to manage orders, plan and carry out productions, communicate with participants and customer representatives, deliver agreed materials and otherwise perform the relevant project.

The legal basis may be the performance of a contract, our legitimate interest in carrying out and administering a customer project, or another applicable legal basis depending on the circumstances.

Invoicing, accounting and legal obligations

We process personal data where necessary for invoicing, accounting, taxation and compliance with other legal obligations.

Processing in these situations is based on compliance with a legal obligation and, where applicable, our legitimate interest in managing our business, maintaining appropriate records and establishing, exercising or defending legal claims.

Portfolio, reference and marketing use of production material

We may use completed productions, photographs, videos and other production material for VisualGoods.store’s portfolio, references, case examples and marketing where we have an appropriate right and legal basis to do so.

Depending on the circumstances, processing may be based on consent or on our legitimate interest in presenting our work and marketing our services, taking into account the rights and reasonable expectations of the individuals concerned.

Where a separate filming, photography or other release or permission has been obtained, the material may also be used in accordance with that permission and the applicable agreement.

For productions involving events or larger groups where individual permission cannot reasonably be obtained from every person appearing incidentally in the material, the applicable legal basis and appropriate information arrangements are assessed according to the circumstances.

Marketing and newsletters

We may process personal data for newsletters and other direct marketing.

Where consent is required, marketing is sent on the basis of the recipient’s consent. A person may, for example, subscribe through a newsletter subscription form or actively select a marketing subscription option when placing an order.

Where applicable law permits business-to-business direct marketing without prior consent, processing may be based on our legitimate interest in marketing our services to relevant business contacts.

Recipients can unsubscribe from electronic marketing or otherwise object to direct marketing at any time.

Website, online store, analytics and advertising

We process technical and usage information to operate and secure our website and online store, understand how they are used, improve our services and, where applicable, measure and develop our advertising.

Non-essential analytics, advertising and similar technologies are used subject to consent where consent is required by applicable law.

Strictly necessary technologies may be used where required for the functioning, security or provision of the website or online store.

Users can manage applicable cookie and tracking choices through the cookie settings made available on the website.

Legal claims, security and misuse prevention

Personal data may also be processed where necessary to protect our rights, property, systems or services, prevent or investigate misuse, resolve disputes or establish, exercise or defend legal claims.

Such processing is generally based on our legitimate interests or compliance with a legal obligation.

OUR LEGITIMATE INTERESTS

Where processing is based on legitimate interests, those interests may include:

managing customer and business relationships
communicating with customers, potential customers and business contacts
providing, administering and improving our services
planning and carrying out customer projects
maintaining appropriate business records
protecting our business, services and legal rights
presenting our work and marketing our services where appropriate
relevant business-to-business marketing where permitted by law.

We consider the nature of the processing and the rights and reasonable expectations of the individuals concerned when relying on legitimate interests.

SOURCES OF PERSONAL DATA

We may receive personal data:

directly from the individual
through the VisualGoods.store website or online store
through forms, email, telephone or meetings
through newsletter or marketing subscriptions
from a customer, employer, colleague or other representative of the same organization
from customers in connection with production planning and participation
from business partners and other parties involved in a project
from publicly available professional or business sources
through cookies, analytics technologies and similar tools, subject to applicable consent requirements
from service providers where necessary for the operation of our services.

For example, a customer representative may provide us with the contact details of another employee or project participant so that we can communicate with that person in connection with a production.

Where personal data has not been obtained directly from the individual, we provide information about the processing as required by applicable data protection law.

RECIPIENTS AND SERVICE PROVIDERS

We use third-party service providers and other partners where necessary for our operations.

Personal data may therefore be processed by or disclosed, where appropriate, to categories of recipients such as:

website and e-commerce service providers
cloud storage, communication and collaboration service providers
accounting, payment and invoicing service providers
electronic signature and document management service providers
analytics, advertising and marketing technology providers
email and newsletter service providers
file transfer, hosting and production workflow providers
IT and technical service providers
freelancers, subcontractors and other professionals involved in productions
professional advisers, such as accountants or legal advisers
public authorities where disclosure is required by law.

Service providers may change from time to time as our business and technical systems develop.

Where a service provider processes personal data on our behalf, we seek to use providers that provide appropriate contractual and other data protection safeguards as required by applicable law.

Freelancers and subcontractors may have access to personal data, including production material containing identifiable people, only where such access is relevant to their work or the relevant production.

INTERNATIONAL PROCESSING AND TRANSFERS

Some of our service providers may process personal data outside the European Economic Area (EEA).

According to the applicable data processing terms and privacy documentation made available by such service providers, they use transfer mechanisms and safeguards intended to meet the requirements of applicable data protection law where such mechanisms are required. These may include, for example, an adequacy decision adopted by the European Commission or the European Commission’s Standard Contractual Clauses.

blind huck Oy relies on the applicable contractual arrangements and documented safeguards provided in connection with these services when selecting and using them.

Each service provider remains responsible for complying with the data protection obligations applicable to its own processing activities, while blind huck Oy remains responsible for its own obligations as data controller.

Further information about the safeguards applicable to international transfers can be requested by contacting info@visualgoods.store.

RETENTION OF PERSONAL DATA

We retain personal data only for as long as it is reasonably necessary for the purposes for which it was collected or as required by applicable law.

As a general rule, personal data relating to inquiries, customer relationships, orders, projects, communications and production working materials is retained for up to three (3) years after the relevant customer relationship or project has ended, or after the last relevant interaction where no project or customer relationship begins.

Production working materials, including raw photographs, video or audio recordings and project files, may be deleted earlier where they are no longer needed.

The following exceptions may apply:

Accounting, invoicing, taxation and other records subject to statutory retention requirements are retained for the period required by applicable law.
Personal data may be retained for longer where this is reasonably necessary to establish, exercise or defend legal claims or to comply with a legal obligation.
Newsletter and marketing subscription information is retained while the relevant subscription or other lawful basis remains valid. Where a person unsubscribes or objects to direct marketing, limited information may be retained where necessary to ensure that the person’s marketing preference is respected.
Completed productions and other material used for portfolio, reference or marketing purposes may be retained for as long as the material continues to be used for that purpose and we continue to have an appropriate right and legal basis for the use.

Personal data may be stored in secure cloud-based systems or on appropriately protected offline storage media, depending on the nature of the information and production.

DATA SECURITY

We take appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or other unlawful processing.

Access to personal data is limited to persons who need the information for their work or for the relevant project.

Personal data may be protected through measures such as access controls, authentication, appropriate system security, restricted sharing and physical protection of storage media.

Persons processing personal data on our behalf are expected to process it confidentially and in accordance with applicable agreements and instructions.

IS PROVIDING PERSONAL DATA MANDATORY?

Providing personal data is generally voluntary.

However, certain information may be necessary for us to:

respond to an inquiry
enter into or administer an agreement
process an order
carry out a production
deliver agreed materials
issue an invoice
comply with legal obligations.

If the necessary information is not provided, we may not be able to enter into an agreement, process an order or provide the relevant service.

Providing personal data for newsletter subscriptions and other consent-based marketing is voluntary and is not required in order to purchase our services.

AUTOMATED DECISION-MAKING AND PROFILING

We do not currently use personal data for automated decision-making that produces legal effects or similarly significant effects on individuals within the meaning of the GDPR.

We do not currently carry out profiling that produces such effects.

YOUR DATA PROTECTION RIGHTS

Subject to the conditions and limitations set out in applicable data protection law, you may have the right to:

obtain confirmation as to whether we process your personal data and access the personal data we hold about you
request correction of inaccurate or incomplete personal data
request deletion of your personal data
request restriction of processing
object to processing based on legitimate interests
object at any time to the processing of personal data for direct marketing
receive personal data you have provided to us in a structured, commonly used and machine-readable format and, where applicable, have that data transmitted to another controller
withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

These rights are not absolute and may be subject to exceptions or limitations under applicable law. For example, personal data that we are legally required to retain cannot necessarily be deleted immediately following a deletion request.

Requests concerning these rights can be sent to:
info@visualgoods.store

We may request information necessary to verify the identity of the person making the request.

Requests will be handled within the time limits required by applicable data protection law.

RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

We encourage you to contact us first at info@visualgoods.store so that we have an opportunity to review and address the matter.

CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice where necessary to reflect changes in our services, processing activities, systems or applicable legal requirements.

The current version of this Privacy Notice will be made available through VisualGoods.store.

Last updated: 29 September 2026