Privacy Policy

Last updated 24 June 2025

1      General information

At Haddadin Design we offer top authentic Finnish and Scandinavian mid-century design. With a focus on the Finnish giants, Paavo Tynell and Alvar Aalto, our selection of their items is extensively growing to cover the increasing demand for their iconic masterpieces.

We also feature a broad range of items by other top Finnish and Scandinavian designers such as Tapio Wirkkala, Ilmari Tapiovaara, Aino Aalto, Hans-Agne Jakobsson, Flemming Lassen, Lisa Johansson-Papé, Märta Blomstedt, and many others.

2      Introduction

Welcome to Haddadin Design c/o Kallion Antiikki Oy. We respect your privacy and are committed to protecting your personal data. This Privacy Policy provides information on how we collect, use, and safeguard your information when you visit our website or make a purchase.

This Privacy Policy provides information on how the personal data of clients, co-operation partners and website visitors is being processed by Kallion Antiikki Oy.

3      Who processes your data?

Kallion Antiikki Oy (Business ID: 1640428-8; address: Laivalahdenkaari 15 C 42 00810, Helsinki Finland, “we”) processes your personal data as the controller for the purposes of fulfilling client orders, engaging in co-operation, or sales and marketing.

If you have any questions related to data protection or you wish to exercise your rights, you may contact: info@haddadin.fi

4      What personal data do we process?

Basic information, such as:

• name
• shipping/billing address, telephone number and email address
• position and title in company, if marketing is directed at the company you work for or you represent a corporate client

Data related to client relationship:

• communication and correspondence related to client relationship
• data related to the handling, invoicing and debt collection pertaining to assignments

Information related to marketing:

• provided information on interests
• marketing measures targeted at you and any information provided or received in connection therewith
• direct marketing consents and prohibitions

If You accept the Cookies when visiting our website:

• IP address
• browser type
• pages visited
• see our Cookie Policy [link to Cookie policy]

Managing the client relationship requires the provision of name and contact details.

5      For what purposes do we process your personal data?

We process your personal data in order to process and fulfill orders and take care of, administer, analyze and develop the client relationship, including through electronic client communications, order updates and via newsletter if consent has been given. We can also use your personal data for analyzing, planning and developing the business operations of the controller.

We process your personal data to improve our website and our services.

We process your personal data for legal compliance purposes, for example fraud prevention.

6      On what grounds do we process your data?

We process your data to respond to inquiries, provide customer support and to prepare and execute an order.

We also process your data based on our contract with you, or to prepare for a contract if you are a potential client. We may process your data based on legitimate interest.

Sending of newsletter or electronic direct marketing is based on your consent. You may prohibit direct marketing at any time by informing us about it at info@haddadin.fi.

7      From where do we obtain your personal data?

We collect your personal data primarily from you at all times. If you represent a corporate client, we may also receive your information from the corporate client that you represent.

If you represent a corporate client or a potential corporate client, we may collect your data from websites and other public sources, and other commercial operators which provide information about companies and their representatives.

8      Who do we share your personal data with?

We will disclose your personal data to the extent permitted and required under applicable legislation. When required by the law, we may disclose personal data to authorities and courts.

We use trusted third-party service providers to support our operations. These service providers process personal data on our behalf and only in accordance with our instructions. They are contractually bound to comply with applicable data protection laws, including the GDPR. These include:

• Payment service providers (e.g. PayPal)
• Shipping service providers (e.g. DHL)
• Finnish Heritage Agency when required for export clearance

When you interact with us through platforms like Incollect or Franckly, we may exchange personal data with those platforms to process your order. These platforms may act as independent data controllers with their own data protection responsibilities.

Our website includes links to or plugins from third-party services such as Instagram and Facebook. These third-party platforms may collect personal data in accordance with their own privacy policies. We encourage you to review their privacy statements to understand how your data is processed.

We primarily use DHL for shipping services. DHL may, in connection with deliveries, request additional information from the recipient, such as a personal identification number, for purposes like customs clearance or identity verification. This data collection is carried out directly between DHL and the recipient — we do not collect personal identification numbers, nor do we have control over the data DHL requires for its operations. We encourage you to review DHL’s own privacy policy for details on how they process personal data.

9      Do we transfer your personal data to a third country?

Transfers of data to third countries always take place using the standard contractual clauses approved by the European Commission.

10   How long do we store your personal data?

We will store the personal data for as long as is necessary for the purposes for which they are processed or for complying with our legal obligations. We will take into account, for example, the periods for filing suit as set out in legislation, bookkeeping obligations and the requirements of anti-money laundering legislation. If there has been no activity in the client relationship for a period of ten (10) years, we will delete the related personal data, unless we are required to retain it for a longer period under applicable law.

Personal data collected for marketing purposes will be stored until we are requested to stop processing such personal data for marketing purposes.

11   How do we ensure data security in the processing of personal data?

We store your personal data in systems which are protected with firewalls, passwords and other technical and organizational measures such as SSL encryption. We only use secure online payment methods.

Any materials maintained manually are located in premises to which unauthorized access is prevented.

Access to personal data is limited to employees who need them in order to perform their duties.

12   What rights do you have?

You can exercise your rights by contacting info@haddadin.fi. Please note that if you wish to exercise your rights regarding data processed by a third-party platform (such as Incollect or Franckly), you may need to contact them directly in addition to us.

12.1  Right of access

You have the right to obtain from the controller confirmation as to whether we process personal data concerning you. You also have the right to access personal data concerning you as well as information on the processing of your personal data as set out in the GDPR.

If you exercise your right to access the information, we will provide you with a copy of the personal data we process. If you request multiple copies, we may charge a reasonable fee for them on the basis of administrative costs.

12.2  Right to rectification

You have the right to request us to rectify any incorrect data without undue delay. You also have the right to have incomplete personal data completed by providing a supplementary statement.

12.3  Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay if:

• your personal data are no longer needed for the purposes for which they were collected or otherwise processed;
• you withdraw consent on which the processing is based and there are no other legal grounds for such processing;
• you object to the processing of your personal data on grounds relating to your particular situation and there are no legitimate grounds for processing or you oppose to the processing of your personal data for direct marketing purposes;
• we have processed personal data unlawfully; or
• personal data have to be erased for compliance with a legal obligation were are subject to.

12.4  Right to restriction of processing

You have the right to obtain from us restriction of processing so that your personal data may, in addition to storing, be processed only with your consent or for the establishment, exercise or defense of legal claims or to protect the interests of another person if:

• you contest the accuracy of your personal data, in which case we will restrict processing for a period enabling the controller to verify the accuracy of the personal data;
• we process your personal data unlawfully and you oppose the erasure of the personal data and request the restriction of their use instead;
• we no longer need your personal data for the purposes of the processing but you require them for the establishment, exercise or defense of legal claims; or
• you have objected to the processing of your personal data on grounds relating to your particular situation and you wait for the verification whether our legitimate grounds override the grounds of your objection.

12.5  Right to data portability

You have the right to receive the personal data provided to us by you in a structured, commonly used and machine-readable format and the right to transmit those data to another controller if:

• our processing is carried out by automated means; and
• the processing is based on your consent or is necessary for executing our agreement or performing pre-contractual measures upon your request.

The right to data portability is limited to conduct which does not adversely affect the rights and freedoms of others.

12.6  Right to object to processing of personal data

You have the right to object to the processing of your personal data on grounds relating to your particular situation if there are no legitimate grounds for the processing.

12.7  Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Data Protection Ombudsman (www.tietosuoja.fi) if you think that your rights under the General Data Protection Regulation have been breached in the processing of the personal data.