1. Controller
NDRG Finland Oy
Koivupurontie 4, 40320 Jyväskylä, Finland
Email: office@nordicdigitalretailgroup.com
2. Register name
Keräilykortti.fi online store customer register
3. Purpose and legal basis for processing
- Managing and maintaining the customer relationship
- Order processing, delivery and invoicing
- Customer support
- Developing and analysing the online store
- Marketing and customer communication (based on consent)
Processing is based on the legal grounds set out in the EU General Data Protection Regulation (GDPR).
4. Data content
- Name, address, phone number, email address
- Order history
- Payment information (does not include card numbers; those are handled by payment providers)
- Consents for customer communication and marketing
5. Regular sources of data
Personal data is obtained from the customer when placing an order, contacting support, or subscribing to a newsletter.
6. Disclosure and transfers
Data is not disclosed to third parties except payment providers, logistics providers and authorities where required by law. Data is not transferred outside the EU/EEA without appropriate safeguards.
7. Retention period
Personal data is retained only as long as necessary for the processing purposes or to comply with legal obligations.
8. Data subject rights
- Right of access to your data
- Right to request rectification or erasure
- Right to object to or restrict processing
- Right to withdraw marketing consent
- Right to lodge a complaint with a supervisory authority
9. Security
Appropriate technical and organisational measures are used to protect personal data, including encrypted connections and restricted access.
10. Contact
All privacy-related enquiries: office@nordicdigitalretailgroup.com