Privacy Policy

Updated: 23 July 2025

This privacy policy describes how Mjuk Group AB (“Mjuk”) processes the personal data of its customers and users of its online services, and how individuals can influence the processing of their personal data.

Mjuk reserves the right to update this privacy policy at any time as deemed necessary and will inform data subjects of any material changes.

Controller

Mjuk Group AB Business ID: 2988359-9 Perämiehenkatu 12 E 533,
00150 Helsinki FINLAND Email: hello@mjuk.com

Collected Personal Data and Its Processing

Mjuk collects and processes personal data from users of Mjuk’s online services.

Legal Basis for Processing

Mjuk processes personal data on the following legal grounds:

Contractual necessity: to fulfil purchase agreements and provide requested services Legal obligations: to meet legal and regulatory requirements (e.g. accounting) Consent: for marketing communications and newsletter subscriptions Legitimate interest: to develop services, improve user experience, and conduct permitted marketing activities

Contents of the Register

The following data may be processed in the register:

Name(s), date of birth, preferred communication language Contact information: billing and delivery addresses, phone numbers, email addresses Business name and Business ID, if the customer is a company Bank account number (for selling service users only) Purchase information: order number, date, items, delivery method, payment method* Marketing data: participation in promotions, campaigns, competitions, events Technical data: browser version, device type, screen resolution Usage data: page views, time spent on site, behaviour in online store Possible third-party data integrations *Mjuk never stores card numbers, bank credentials, or other sensitive payment information.

Data Sources

Data is collected from the data subject, Mjuk’s systems and services, marketing activities, partners' databases, and publicly available sources. Website usage data is also collected through cookies (see Cookie section).

Data Retention

Personal data is retained for as long as the customer relationship or service subscription is active. Data may be stored for longer where required by law or contractual obligations (e.g. warranties).

Data Protection

Personal data is stored in password-protected systems with restricted access. Only authorised Mjuk employees with work-related needs may access the data.

International Transfers

Personal data is primarily processed within the EU/EEA. If data is transferred outside the EU/EEA, Mjuk ensures adequate safeguards, such as standard contractual clauses approved by the European Commission, are in place.

Disclosure to Third Parties

Mjuk may share personal data with trusted third-party service providers who perform services on Mjuk’s behalf, including logistics partners, IT and analytics providers, marketing platforms, and customer service tools. All third parties are contractually bound to process data only for the agreed purpose and in accordance with GDPR.

Cookie Usage and Consent

Mjuk’s online services use cookies for development, personalisation, and marketing purposes. Cookies are categorised into functional, advertising, analytics, and social media cookies. Users can manage cookie preferences via the cookie banner or browser settings. Non-essential cookies are only used with user consent, in compliance with applicable cookie regulations.

User Rights

Users have the right to:

Access their personal data Correct or complete inaccurate or incomplete data Request deletion of their data Restrict processing under certain conditions Object to processing based on legitimate interests Receive their data in a structured, electronic format and transfer it to another controller

To exercise these rights, users should contact the email listed above. Mjuk may decline requests where permitted under data protection law.

Right to Lodge a Complaint

Users have the right to lodge a complaint with a supervisory authority if they believe their personal data has been processed unlawfully.