PRIVACY

Privacy policy

This policy explains how Robust Nordic AB processes personal data in accordance with the EU General Data Protection Regulation (GDPR).

01Controller

Robust Nordic AB (Reg. no. 559468-2824 · VAT SE559468282401), Sörnäistenkatu 1, 00580 Helsinki, Finland.

Privacy enquiries: info@robustnordic.com.

02What data we process

Order dataName, email address, phone number, delivery and billing address, ordered products, order total and order history.
Payment dataPayment transaction identifier and status. We do not process or store card numbers. They are processed in the payment service provider's system.
Customer account dataEmail address, an encrypted password hash and saved addresses.
CommunicationThe content of contact forms and emails, as well as marketing permissions and their withdrawals.
Technical dataIP address, browser and device data and events relating to the use of the site. Analytics data is only collected with your consent.

03Purpose and legal basis of processing

Delivering ordersPerformance of a contract. Without this data, the order cannot be delivered.
Accounting and statutory obligationsLegal obligation. The Accounting Act requires records to be kept.
Customer service and complaintsLegitimate interest and performance of a contract.
Newsletter and marketingConsent. You can withdraw your consent at any time.
Analytics and cookiesConsent. Necessary cookies are based on our legitimate interest in ensuring the service works.

04Retention period

Order and accounting records are kept for six years after the end of the financial year, as required by the Accounting Act.

Customer account data is kept for as long as the account exists. You can delete your account by contacting us.

Marketing list data is kept until you withdraw your consent.

Analytics data is kept for up to 24 months.

05Recipients of data

We only disclose data to the extent needed to fulfil the order. Recipients include the provider of the e-commerce platform and servers, the payment service provider, the carriers Posti and Matkahuolto, the email and newsletter service, an analytics service based on your consent, and the accounting service.

We do not sell your data or disclose it to third parties for marketing purposes.

06Transfers outside the EU

We aim to process data within the EU and EEA. If a service we use transfers data outside this area, the transfer is based on the standard contractual clauses approved by the European Commission or an equivalent safeguard.

07Your rights

Right of accessThe right to know what data is processed about you and to receive a copy of it.
RectificationThe right to have incorrect or incomplete data corrected.
ErasureThe right to have data erased when there is no longer a basis for processing. We cannot delete accounting records during the retention period.
Restriction of processingThe right to have processing restricted in certain situations.
Right to objectThe right to object to processing based on legitimate interest and to direct marketing.
Data portabilityThe right to receive the data you have provided in a machine-readable format.
Withdrawing consentThe right to withdraw your consent at any time without affecting earlier processing.

08Exercising your rights and the right to lodge a complaint

Requests should be sent by email to info@robustnordic.com. We respond to requests within one month. We may ask you to verify your identity before disclosing any data.

If you believe that we process your data unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

09Data security

The connection to the online store is encrypted. Access to personal data is limited to those who need it for their work. Our service providers are bound by data processing agreements.