Privacy Policy
1 Background
This policy outlines how we at Discmania Store Europe comply with the EU General Data Protection Regulation (GDPR) when collecting and processing personal data.
Spin18 Oy, 1723737-0 (the Company, “we”, “our”) is the data controller in relation to the processing of your personal data, unless otherwise stated.
In this notice, we describe how we collect, process, and share the personal data that we store. Personal data means any information which may be used to identify an individual.
It is important to us that you feel safe with how we handle your personal data. We take measures to ensure that your personal data is protected and that the processing of your personal data is carried out in accordance with applicable data protection regulations and our internal policies and procedures.
2 From where do we collect your personal data
We may collect your personal data in the following ways:
Personal data that we collect from you:
We collect personal information related to the customer relationship when you register as a user of the online store or at the latest when ordering. An email address is also collected when subscribing to a newsletter. Your personal information is also collected when you fill a contact or application form in our websites.
Personal data that we collect or generate automatically:
When you visit our website, it will automatically collect some personal data about you and your visit such as your IP address.
3 When and why we process your personal data
We process your personal data for the following purposes:
Provide our Service and website
We process your personal data to process your orders and to manage your customer account and relationship, and to provide our website.
| Categories of personal data | Legal basis |
|---|---|
|
The legal basis for processing is GDPR Article 6 (1) (b), performance of the contract to which the data subject is party. The processing is necessary in order to process your orders, fulfill deliveries, to manage your customer account and relationship, and to provide our website. |
|
Storage period: Your identification data, contact data, and order information is stored during the customer relationship and as long as it is necessary in relation to the purposes for which they are processed. |
|
Marketing and advertising
If you have subscribed our newsletter, we will process the following personal data to send you our newsletter and to advertise our services.
| Categories of personal data | Legal basis |
|---|---|
|
The legal basis for processing is GDPR Article 6 (1) (a), your consent. The processing is necessary in order to send newsletter to our newsletters subscribers. |
|
Storage period: Your identification data, contact data, and order information is stored during the customer relationship and as long as it is necessary in relation to the purposes for which they are processed. Your payment data will be processed for a period of 6 years from the end of the relevant accounting year |
|
Customer communication
We have contact forms for customer communication in our websites that collect your personal data when you submit the form.
| Categories of personal data | Legal basis |
|---|---|
|
The legal basis for processing is GDPR Article 6 (1) (f), our legitimate interests. The processing is necessary in order to process customer communication sent through the forms. |
| Storage period: Your personal data is processed as long as it is necessary in relation to the purposes for which they are processed. | |
Application forms
We process your personal data when you fill in application forms, such as the dealer application form and the volunteer application form.
| Categories of personal data | Legal basis |
|---|---|
|
The legal basis for processing is GDPR Article 6 (1) (f), our legitimate interests. The processing is necessary in order to process customer communication sent through the forms. |
| Storage period: Your personal data is processed as long as it is necessary in relation to the purposes for which they are processed. | |
Legal compliance
We process your personal data to comply with legal requirements such as tax and accounting regulations.
| Categories of personal data | Legal basis |
|---|---|
|
The legal basis for processing is GDPR Article 6 (1) (c), compliance with our legal obligations. The processing is necessary in order to to comply with legal requirements such as tax and accounting regulations. |
| Storage period: Documentation/verifications concerning financial year accounts are stored during 6 years from the end of the relevant accounting year and the other information is stored during the customer relationship and as long as it is necessary in relation to the purposes for which they are processed. | |
4 Cookies
We use cookies on our websites. Cookies are small text files that are stored in your device when you visit our websites. Cookies are divided into necessary and other cookies. Our websites need necessary cookies in order to store user-specific information and settings. These may include, for example, the logged-in user's session, the contents of the shopping cart, the language or region selection, and any other display settings. It is not required to ask a specific permission to set necessary cookies, because these are necessary to provide the website and its functionalities to you.
In addition to necessary cookies, we use other cookies:
Analytics
We process your personal data in order to analyze the use and content of our website.
| Categories of personal data | Legal basis |
|---|---|
|
The legal basis for processing is GDPR Article 6 (1) (a), your consent. The processing is necessary to analyze the use of our websites and to develop marketing. |
| Storage period: Analytics data is stored as long as it is necessary in relation to the purposes for which they are processed. | |
5 Recipients that we share your personal data with
Where necessary, we share your personal data with others. The recipient is the data controller for the processing of your personal data, unless we have stated otherwise.
We share your personal data with:
Service providers
In order to fulfil the purposes of the processing of your personal data, we share personal data with service providers that we have engaged. These service providers provide IT services to us such as operation, technical support and maintenance of IT systems. The service providers may only process your personal data for these purposes and in accordance with our instructions and not for their own purposes.
We are the data controller for the processing of personal data that the service providers carry out on our behalf.
Group companies
In certain cases, we share your personal data with group companies for example for reporting purposes. In these cases sharing means mostly giving access.
| Recipient | Purpose | Legal basis for the transfer |
|---|---|---|
| Discmania Inc | Reporting and conducting shared business purposes | Legitimate interest is GDPR Article 6 (1) (f). |
Other recipients
In certain cases, we share, if necessary, your personal data with other recipients for certain purposes. Examples of recipients are external advisors, authorities, courts, the police and potential buyers or sellers of the company.
| Recipient | Purpose | Legal basis for the transfer |
|---|---|---|
| External advisors | If necessary, we may share information with external advisors, e.g. to a law firm, if the sharing of personal data is necessary for us to prepare for and defend ourselves against any legal claims that may be made against us. | Legitimate interest GDPR Article 6 (1) (f). |
6 Where we process personal data
We always strive to store and process personal data within the EU/EEA. However, some of our service providers are located outside the EU/EEA and in such a case personal data will be processed outside the EU/EEA. In order to ensure that the personal data is protected we make sure that appropriate safeguards are in place in relation to the service providers which handles your personal outside the EU/EEA, e.g. by way of adopting standard data protection clauses adopted by the EU Commission. If you have questions regarding to which countries your personal data is transferred and which safeguards we take to protect your personal data, or to request a copy of such safeguards and information, respectively, where they are available, please contact us at europe@discmania.net.
7 Your rights
Under data protection regulations you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfill your rights. Please submit requests for exercising your rights by contacting us at europe@discmania.net.
You have the right to:
Access your personal data
You have the right to access personal data we process about you. You may request a copy of your personal data. We will provide you with it unless we have lawful reasons not to share this data or if sharing the data would adversely affect the rights and freedoms of others.
Update your personal data
Furthermore, you have the right to request that incorrect or incomplete personal data is corrected or completed.
Withdraw consent
To the extent we rely on your consent to process personal data you have the right to at any time withdraw your consent.
Object to the processing of personal data
You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concerns your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims.
Delete your personal data
Under certain circumstances you have the right to request that your personal data is deleted. However, we cannot delete your personal data if we for example are obligated under law to keep the data.
Restrict the use of your personal data
You have the right under certain circumstances to request that the processing of your personal data is restricted. If the processing of your personal data has been restricted we may only, besides storing the data, process your personal data with your consent, in order to establish, exercise or defend legal claims or to defend rights of others.
Transfer your personal data (data portability)
Finally, you have the right to request a copy of the personal data that we store about you in a structured, commonly used and machine-readable format (data portability). The right to data portability, compared to the right to access, only comprises such personal data you yourself have provided and which we process based on certain legal grounds, e.g. your consent.
8 We can update this information
We may occasionally update this information, e.g. if we would process personal data for new purposes, collect additional categories of personal data or share personal data with other recipients. In such a case we will notify you in an appropriate way. The latest version of the information is always published on this page.
9 Contact
If you have any questions regarding the processing of your personal data, please do not hesitate to contact us. See below for contact details. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority within your jurisdiction.
Spin18 Oy / Discmania Store Europe
1723737-0
E-mail: europe@discmania.net
Postal address: Etu-Hankkionkatu 18
33700 Tampere, Finland
10 Information regarding categories of personal data
Please see the table below for further information regarding which categories of personal data that we process.
| Category | Examples of personal data |
|---|---|
| Identification data | Name |
| Contact data | Email, shipping address, phone number, billing address |
| Order information | Content of your purchase |
| Payment data | Method of payment, card number, billing address |
| Communication data | Content of the communication you have with us |
| Content data | Content of the information you provide in our application forms |
| Information generated by the use of the website | Information generated by the use of our websites, such as IP addresses |