Privacy statement
This is a report on the processing of personal data in accordance with the EU's General Data Protection Regulation (679/2016).
The following privacy practices are valid from 1 July 2024.
Who are we?
We are Nordbest Oy ("we") We are a limited company registered in Finland, business registration number (3411861-3)
The privacy statement tells how and why we use your personal data in our services at www.nordbest.fi
Registrar
Nordbest Oy, company identification number: (3411861-3)
Contacts regarding data protection matters
Data protection officer Riaz Khan
Email: asiakaspalvelu@nordbest.fi
In all questions related to the processing of personal data and in situations related to exercising one's own rights, the registrant is advised to contact the data protection officer.
Name of the personal and marketing register
Customer register and marketing register
Basis and purpose of personal data processing
The legal basis for the processing of personal data is the customer relationship and/or contractual relationship between the data subject and the controller. The purposes of personal data processing include the maintenance of customer relationships and partnerships. In addition, personal data can be used for marketing purposes.
Personal data to be processed
The registrar collects only such personal data from the registrants that are relevant and necessary for the purposes described in this privacy statement.
The controller processes personal data in a way that aims to ensure appropriate security of personal data, including protection against unauthorized processing and accidental loss, destruction or damage.
The controller uses appropriate technical and organizational safeguards to ensure this goal, including the use of firewalls, encryption technologies and secure device spaces, appropriate access control, careful management of user IDs for information systems, and instructing personnel involved in the processing of personal data.
Based on the Employment Contracts Act (55/2001) and the confidentiality agreements supplementing them, all employees who process personal data have a duty of confidentiality regarding matters related to the processing of registered personal data.
Information we hold
Information you share with us when you use and browse our website;
Your IP address, operating system browser and the pages you visit
In connection with the order request and offer; your home address, place of birth, name, email address and phone number
When ordering; your delivery address, order information and payment information
When sending email or attachments; e-mails and any e-mail attachments that are stored
When you contact us; information about public social media profiles (such as Facebook, Instagram or Twitter) when you contact us through these platforms, as well as the content of the messages you send us
Information we receive from outside sources
Why we collect your information
We use your information to ensure that your customer experience is the best possible. This includes, but is not limited to:
• We develop our products and services for you and other customers
• We make sure everyone gets the best customer experience
• We conduct market research to understand our customers' views and adapt your experiences to make our service more functional and interesting
• To keep you informed and respond to your inquiries quickly and efficiently
• In preventing crimes and frauds, assessing credit risk and providing services
Why we use your information
How we process your data under GDPR falls into four main categories:
• Agreement, consent, legal requirement and legitimate interest
• You will always receive information related to your account, but you can also subscribe to our newsletter or other offers
• We do not sell your information and we will never share your information with a third party for marketing purposes unless you have given us your express permission
• However, we may disclose your personal information if the law obliges us to do so or if you violate our terms of service
When we are legally required to act and use your information
• Prevents crime and criminal activity
• Comply with all legal requirements
• Respond to requests from the police or administrative body
When you become a customer, we use your information:
• To evaluate your application
• To perform a "light" credit check
• To deliver the services and products you ordered
• To respond to your contact and to solve your possible challenges
• To send you information about new products, promotions and services
• To settle overdue payments (payment reminders)
We use your information:
• Providing the order service for the bike you ordered, including delivery, payment, customer service, etc.
• To display ads or save the purchase path outside of our platform with the help of cookies and tracking pixels
• To improve our services and suggest new and partner services that you may like based on your purchasing behavior or customer profile
We ask for your consent:
• About the products and services of our partners
• Tell us about other products in our stock that you might like
• Receive our newsletter
You can request to be removed from our database at any time by contacting the data protection officer at asiakasplavelu@nordbest.fi but if you exercise your right to be removed, we may not be able to offer you services.
Who we share your information with
• Companies that provide us with services. Here we mean companies that help us provide the services you use and that therefore have to process information about you.
• We share your information in the following situations:
• With partners, suppliers, subcontractors and software companies that help us deliver the products and services you choose
You have given your consent when we have legal requirements
• Companies that help us generate marketing (we do not share personally identifiable information with third parties for their own direct marketing purposes)
• Third-party service providers that set functional cookies for users who interact with share-to-person.
• Law enforcement authorities and other external parties.
• We may share your information with: the police, courts or dispute resolution bodies if necessary
• Debt collection agencies if you have arrears and we are unable to reach a solution directly with you
• Other third parties if necessary to fulfill legal obligations
Where your data can be sent if necessary
• Partners, suppliers, agents, subcontractors and software companies who help us deliver the products and membership services you choose send information to other territories
• Data is transferred to facilitate the provision of services and all data is adequately protected in accordance with GDPR regulations when transferred within Europe and in accordance with EU standards when transferred outside of Europe.
How long do we keep your data?
• We retain personal data for as long as you are a customer and for the duration of our business, which is at least 10 years to comply with the law or if we face a legal challenge. At the end of this period, we will delete or anonymize the data within one year according to our deletion processes. In some circumstances, such as cases of fraud, we may retain information for longer if we need to and/or are required to by law. In each case, the time we need to keep the data may be different, but we only keep the data for as long as we need it.
• The controller may have an obligation to process some of the personal data included in the register longer than stated above in order to comply with legislation or official requirements.
Your rights
You have the following rights:
• The right to get access to personal data and the right to get a copy of their personal data
• Request a copy of your personal data in a machine-readable format
• The court requests that incorrect information be corrected
• The registered person has the right to request that inaccurate personal data concerning him be corrected. The registered person also has the right to have incomplete personal information completed by submitting the necessary additional information.
• Ask us to delete, "block" your information, although for legal reasons we may not always be able to do so
• You can opt-out to us if we use your information for direct marketing and in certain other "legitimate interest" circumstances withdraw your consent to us
• The registered person has the right to receive confirmation as to whether personal data concerning him or her is being processed
• Right to erasure; the data subject has the right to request the deletion of personal data concerning himself, if
o a. personal data are no longer needed for the purposes for which they were collected; or
o b. personal data has been processed illegally.
• Right to restriction of processing; the data subject has the right to limit the processing of his/her personal data, if a. the data subject disputes the accuracy of his/her personal data; b. the processing is against the law, and the data subject objects to the deletion of his personal data and instead demands the restriction of their use; or c. the controller no longer needs the personal data for the original purposes of the processing, but the data subject needs them to prepare, present or defend a legal claim.
• The right to transfer data from one system to another
• The registered person has the right to receive the personal data concerning him and that he has provided himself in a structured, commonly used and machine-readable format and the right to transfer the data in question to another controller.
• The right to file a complaint with the supervisory authority
• The national supervisory authority for personal data matters is the Office of the Data Protection Commissioner operating in conjunction with the Ministry of Justice. You have the right to submit your case to the supervisory authority if you consider that the processing of your personal data violates the relevant legislation. If you want to do any of these, contact us by email at asiakaspalvelu@nordbest.fi
If you want to make a complaint about how we use your personal data, please contact us by email at asiakaspalvelu@nordbest.fi and we will do our best to fix the problem. You can also contact our data protection officer.
Changes to this Privacy Statement
We will publish any changes we make to the privacy notice on this page and if they are significant, we will notify you by email. The changes may also be based on changes in the legislation on data protection.