Privacy policy - Keräilykortti.fi

1. Data Controller

NDRG Finland Oy (Business ID: 3535876-6)
Martinpolku 23, 41800 Korpilahti, Suomi
Email: office@nordicdigitalretailgroup.com

2. Name of the Register

Tradingcard.fi Online Store Customer Register

3. Purpose and Legal Basis for Data Processing

Personal data is processed for the following purposes:

Managing and maintaining customer relationships
Processing, delivering, and invoicing orders
Providing customer service
Developing and analyzing the online store
Marketing and customer communication (based on consent)

The processing of personal data is based on the legal grounds specified in the General Data Protection Regulation (GDPR), such as contract execution, legal obligations, and the legitimate interests of the data controller.

4. Data Content of the Register

The register may include the following customer information:

Name
Address
Phone number
Email address
Order history
Payment information (card details are processed by payment service providers)
Marketing and communication preferences

5. Regular Sources of Data

Personal data is collected directly from the customer when placing an order, contacting customer service, or subscribing to newsletters.

6. Data Disclosure and Transfer

Personal data is not disclosed to third parties except in the following cases:

To payment service providers for processing payments
To logistics partners for delivering orders
To authorities when required by law

Personal data will not be transferred outside the EU or EEA without appropriate safeguards ensuring adequate data protection.

7. Data Retention Period

Personal data is stored only as long as necessary to fulfill the purposes of the register or comply with legal obligations.

8. Data Subject Rights

Data subjects have the following rights:

Right to access their personal data
Right to request correction or deletion of data
Right to object to data processing
Right to restrict data processing
Right to withdraw consent for marketing
Right to file a complaint with a supervisory authority

9. Data Security

Appropriate technical and organizational security measures, such as encrypted connections and restricted data access, are used to protect personal data.