Privacy Notice – lakkapaa.dk

Data Controller

• Nordic Online Center Oy
• Varikonkatu 3
• 95420 Tornio
• FINLAND

Data Protection Officer

• Nordic Online Center Oy
• Business ID: 3531882-8
• Varikonkatu 3
• 95420 Tornio
• FINLAND

Name of the Register

Nordic Online Center Oy customer register (lakkapaa.dk)

Purpose of Processing Personal Data

Personal data stored in the customer register of lakkapaa.dk online store is used for:

• Managing customer relationships
• Processing inquiries
• Marketing purposes
• Purposes related to online services
• Processing and delivery of orders

Contents of the Register

The register contains the following basic information about registered individuals:

• name
• address
• phone
• email
• order history
• CVR number for business customers

Regular Sources of Personal Data

The data controller registers information from users of the lakkapaa.dk online store that the user themselves provides when using the website.

Regular Disclosure of Data and Transfer of Personal Data Outside the EU or EEA

We do not disclose your data to third parties for marketing purposes. Data necessary to deliver the order — name, address, phone number and email address — is disclosed to the carrier so the shipment can be delivered and tracked. Payment data is processed by Klarna as an independent controller. No data is transferred outside the EU or EEA.

Register Security Measures

The data in Nordic Online Center Oy customer register is stored in the data controller's system. Access to the system requires entering a username and password. The system is also protected by firewalls and other technical means. Only certain, pre-designated employees of the data controller have access to and are authorized to use the information in the register. The information in the register is stored in locked and guarded facilities.

Right to Object to Processing

The data subject has the right to prohibit the data controller from processing personal data concerning him or her for direct marketing, distance marketing and other direct marketing, as well as market and opinion research, as well as personal registers and genealogical research. An objection must be made in writing and directed to the person responsible for personal data.

Right of Access

The data subject has the right to inspect personal data about him or herself stored in the register and obtain copies of it. A request for access must be made in writing and directed to the person responsible for personal data.

Data Correction

The data controller corrects, deletes or supplements inaccurate, unnecessary, incomplete or outdated personal data in the register on its own initiative or at the request of the data subject. The data subject should contact the data controller's data protection officer to have data corrected.