Elgood Oy / Partco Privacy Notice

Updated on 28 September 2026

This privacy notice explains how Elgood Oy processes the personal data of Partco customers, online store users and other individuals who interact with Partco.

Personal data is processed in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation.

1. Data controller

Elgood Oy, the operator of the Partco.fi online store
Juurakkotie 5 B
01510 Vantaa
Finland

Phone: +358 207 981 140
Email: info@elgood.fi

2. Contact details for data protection matters

Questions and requests concerning data protection and the processing of personal data may be addressed to:

Elgood Oy / Customer Service
Juurakkotie 5 B
01510 Vantaa

Phone: +358 207 981 140
Email: info@elgood.fi

3. Name of the register

Elgood Oy / Partco Customer Register

4. Purposes and legal bases for processing personal data

Personal data is processed to manage Partco customer relationships, orders, the online store, in-store transactions, customer communications and other services.

5. Categories of personal data

Elgood Oy / Partco may process the following personal data.

Customer and contact details

• first and last name
• company name and information relating to the business customer relationship
• email address
• phone number
• billing and delivery address
• customer number
• customer group
• information provided by the customer to verify eligibility for a particular customer group or benefit

Customer groups may include, for example, business customers, students or staff members.

Order and customer interaction data

• products and services ordered
• prices and discounts
• order and delivery history
• delivery and payment methods
• invoicing details
• payment method, amount paid and payment terms
• payment transaction reference or other identifier
• information relating to customer service, returns, complaints and warranty matters

Messages relating to customer service and other interactions may be retained to handle the matter concerned and manage the customer relationship.

Marketing and communications data

• record of marketing consent
• date and time when consent was given
• data on newsletter and marketing message opens and link clicks
• targeting of communications based on customer group

Partco uses Creamailer to send newsletters to online store customers.

Website and online store usage data

Data processed in connection with website use may include:

• IP address
• technical information about the browser and device
• time of the visit
• page views and website event data
• traffic source
• searches made in the online store
• clicks on search results
• search-related conversions
• information collected through cookies and similar technologies

6. Payments

The online store may offer several payment methods, including invoicing for business customers, online banking, card and mobile payments, and PayPal payments.

For prepaid online store orders, Partco's systems may store the payment method, amount paid, payment terms and a payment transaction reference or other identifier. This information is processed for order handling, payment reconciliation, invoicing and accounting.

Payment service providers, such as Paytrail, are used to process online banking, card and mobile payments. PayPal payments are processed through PayPal.

Actual payment card details or online banking credentials are not transferred from online store orders to Partco's ERP system.

7. Customer groups and business customers

Customers may be assigned to groups, such as business customers, students and staff.

The customer group may affect the benefits or pricing offered to the customer. Eligibility for a particular customer group may, where necessary, be verified using information provided by the customer.

Company identification and creditworthiness information may be processed, and external business information and credit information services may be used, to assess invoicing and payment terms for business customers.

Parts of the order process for consumer customers may be handled automatically. However, order processing is supervised by staff. Partco does not currently use decision-making based solely on automated processing that produces legal effects concerning the customer or similarly significantly affects them.

8. Sanctions and export restrictions

Personal data may be processed to comply with applicable sanctions and export control obligations and to prevent prohibited or restricted deliveries.

This may involve processing, for example:

• customer or company information
• country of delivery
• order details
• products ordered
• where necessary, information about the end user, country of end use or intended use of the products

During checkout, customers may be asked to accept Partco's sanctions and export terms.

As of the date of this privacy notice, this acceptance is not stored as a separate record in the customer's profile or order details. If such recording is introduced later, this privacy notice will be updated accordingly.

The sanctions and export terms themselves are set out in Partco's delivery terms.

9. Sources of personal data

Personal data is primarily obtained directly from the customer through the online store, in-store interactions, email, phone or other customer service channels.

Data may also be obtained and supplemented from the invoicing, customer relationship management and customer service systems used by Elgood Oy, newsletter usage data, companies and services providing business information, and public authorities.

In addition, analytics and usage data concerning the website and online store may be collected through cookies and similar technologies in accordance with the user's consent.

10. Disclosure of personal data and data processors

Personal data may be disclosed to or processed by Elgood Oy's contractual partners to the extent necessary to provide order handling, payments, deliveries, customer communications, the technical operation of the online store, analytics or other services described in this privacy notice.

Data may be processed, for example, in:

• payment services
• transport and logistics services
• online store and ERP systems
• email marketing services
• analytics and advertising services
• online store search and technical services

To deliver orders, transport and logistics service providers may receive information such as the customer's name, delivery address, email address and phone number to the extent required to complete the delivery.

Personal data is disclosed only to the extent required to provide the service concerned or comply with a legal obligation.

Data may also be disclosed to competent authorities where there is a lawful basis for doing so.

11. Transfers outside the EU and EEA

Some service providers used by Elgood Oy may process personal data outside the European Union or the European Economic Area.

If personal data is transferred outside the EU or EEA, the transfers are carried out in accordance with applicable data protection legislation and with appropriate safeguards.

12. Retention periods

Personal data is retained only for as long as necessary for the purpose of processing or to comply with a legal obligation.

Sales order and order history data is retained for a maximum of ten years where retention is based on accounting legislation or another comparable statutory obligation.

Order history and customer relationship data may additionally be retained for as long as necessary to handle matters such as warranties, complaints, liability or contractual issues.

A registered customer's personal data may be deleted at the customer's request if there is no legal obligation or other justified need to retain it.

Data relating to customer accounts without an order history is retained only for as long as necessary to provide the customer account and service.

Marketing-related data is retained for as long as marketing consent or another applicable legal basis remains valid.

The retention periods for technical logs, analytics and cookie data depend on the service and type of data concerned.

13. Cookies and analytics

Partco.fi uses cookies that are essential for the operation of the online store, as well as analytics, preference and marketing cookies based on the user's consent.

When visiting the website, users can accept all cookies or allow only essential cookies.

Cookie preferences can be changed later through the online store's cookie settings.

Partco uses Google Analytics 4 to analyse website usage and Google Ads tracking to measure the effectiveness of online advertising and conversions.

The online store uses Algolia for its search functionality. To improve the search function, data may be processed on searches performed, clicks on search results and search-related conversions.

Cookies and tracking technologies that are not essential for the operation of the online store are used in accordance with the user's consent.

14. Newsletters and customer communications

Partco sends electronic marketing only with the customer's consent.

Customers can subscribe to the newsletter separately without making a purchase. A record of marketing consent and the date and time when it was given may be stored.

Consent can be withdrawn at any time using the unsubscribe link in the newsletter or by contacting Elgood Oy's customer service.

Data on message opens and link clicks may be processed to improve the effectiveness and content of newsletter communications.

Regardless of marketing consent, Partco may send customers communications concerning, for example, the customer relationship, order processing, service operation, technical changes or security, provided that these communications are not direct marketing.

15. Video surveillance

Video surveillance is used in Partco's retail premises to ensure safety and protect property.

Video surveillance involves processing footage in which individuals may be identifiable.

Video surveillance recordings are retained for a maximum of three months, unless a particular recording needs to be retained longer, for example, to investigate a criminal matter, damage or another incident.

Video surveillance material may be disclosed to competent authorities where there is a lawful basis for doing so.

16. Protection of personal data

Personal data is processed in systems that can only be accessed by individuals whose work duties require the processing of personal data.

Access to systems is protected by usernames, passwords, access permissions and other appropriate technical and organisational security measures.

Traffic between the online store and the user is protected by an encrypted HTTPS connection.

Employees and contractual partners who process personal data are bound by confidentiality and data protection obligations.

Personal data is backed up appropriately. Backups are subject to the same personal data retention and deletion principles as other data processed in the systems.

Physical access to personal data is restricted through appropriate access controls and protective measures.

Information security is audited internally at regular intervals.

17. Rights of the data subject

Under applicable data protection legislation, data subjects have the right to:

• obtain confirmation of whether their personal data is being processed
• access their personal data
• request the correction of inaccurate or incomplete data
• request the deletion of personal data where there are lawful grounds for deletion
• request restriction of processing
• object to processing based on legitimate interests
• object to direct marketing
• withdraw their consent at any time where processing is based on consent
• in certain circumstances, receive the personal data they have provided in a machine-readable format and transfer it to another controller

Registered customers can view and edit some of their customer and address details by logging in to the Partco.fi online store.

More comprehensive requests to access, correct or delete personal data can be submitted to Elgood Oy's customer service.

Elgood Oy may request additional information where necessary to verify the identity of the person making the request.

18. Right to lodge a complaint with a supervisory authority

If a data subject considers that their personal data has been processed in breach of data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

19. Changes to this privacy notice

Elgood Oy may update this privacy notice, for example, when services, personal data processing, legislation or official guidance change.

The current privacy notice is published on the Partco.fi website. The date of the latest update is shown at the beginning of the notice.