PRIVACY POLICY
1. GENERAL PROVISIONS
1.1. This privacy policy regulates the principles of collecting, processing, and storing personal data. The personal data is collected, processed, and stored by the data controller, NordWis NordicWisdom OÜ (hereinafter referred to as the "data controller").
1.2. A data subject within the meaning of this privacy policy is a customer or any other natural person whose personal data is processed by the data controller.
1.3. A customer within the meaning of this privacy policy is anyone who uses the services of the data controller's website.
1.4. The data controller complies with the principles of data processing established by law, including processing personal data lawfully, fairly, and securely.
2. COLLECTION, PROCESSING, AND STORAGE OF PERSONAL DATA
2.1. The personal data collected, processed, and stored by the data controller is gathered electronically, mainly through the website and email.
2.2. By sharing their personal data, the data subject grants the data controller the right to collect, organize, use, and manage personal data for the purposes defined in this privacy policy. The data subject shares this data directly or indirectly when purchasing goods or services on the website.
2.3. The data subject is responsible for ensuring that the data they provide is accurate, correct, and complete. Knowingly providing false information is considered a violation of this privacy policy. The data subject must promptly notify the data controller of any changes to the provided data.
2.4. The data controller is not responsible for any damage caused to the data subject or third parties due to the submission of incorrect data by the data subject.
3. PROCESSING OF CUSTOMERS' PERSONAL DATA
3.1. The data controller may process the following personal data of the data subject:
3.1.1. First and last name
3.1.2. Email address
3.2. In addition to the aforementioned, the data controller has the right to collect information about the customer that is available in public registers.
3.3. The legal basis for processing personal data is Article 6(1) points (a), (b) and (c) of the General Data Protection Regulation (GDPR):
a) The data subject has given consent to the processing of their personal data for one or more specific purposes;
b) Processing of personal data is necessary for the performance of a contract to which the data subject is a party or for taking steps prior to entering into a contract at the request of the data subject;
c) Processing of personal data is necessary for compliance with a legal obligation to which the data controller is subject.
3.4.1. Security and safety. Retention period: as specified by law
3.4.2. Customer management. Retention period: 2 years
3.4.3. Financial activities and accounting. Retention period: as specified by law
3.4.4. Marketing. Retention period: 2 years
3.5. The data controller has the right to share customer personal data with third parties, such as authorized data processors and accountants.
3.6. The data controller retains the data of data subjects for a period of no more than five years, based on the purpose of processing.
4. RIGHTS OF THE DATA SUBJECT
4.1. The data subject has the right to access and review their personal data.
4.2. The data subject has the right to receive information regarding the processing of their personal data.
4.3. The data subject has the right to correct or supplement inaccurate data.
4.4. If the data controller processes personal data based on the data subject’s consent, the data subject has the right to withdraw their consent at any time.
4.5. The data subject may contact the e-store customer support at info@nordwis.ee.
4.6. The data subject has the right to file a complaint with the Data Protection Inspectorate to protect their rights.NordWis' cookie usage principles describe how NordWis uses cookies on the website www.nordwis.ee.
5. FINAL PROVISIONS
5.1. This privacy policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons regarding the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, the Personal Data Protection Act of the Republic of Estonia, and other applicable Estonian and European Union laws.
5.2. The data controller has the right to amend the privacy policy partially or fully by notifying the data subjects via the website www.nordwis.ee.