GDPR

Data Protection Registration and Statement

This is the data protection registration and statement of Nordic Homesteads LTD in accordance with the Personal Data Protection Act (sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Drafted on 25.08.2022

1. Registration Controller

Nordic Homesteads LTD, Avenida da Republica 50, Piso 2, 1050-196, Lisbon
info@saunamo.shop

2. Name of the Register

Nordic Homesteads LTD Customer Register, Online Services User Register and Marketing Register.

3. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation is — the person's consent (documented, voluntary, specific, informed and unambiguous), or — a contract to which the person is a party, or — the legitimate interest of the registration controller (for example customer relationship, employment relationship, membership). The purpose of processing personal data is communication with customers, maintaining the customer relationship, and targeting advertising and marketing. The data is not used for automated decision-making or profiling.

4. Data Content of the Register

The data recorded includes: the person's name, contact details (telephone number, email address, postal address), IP address of the internet connection, information about the services ordered and any changes to them, billing information and other information related to the customer relationship and the services ordered.

5. Regular Sources of Data

The data recorded is obtained from the customer through messages sent via forms on the saunamo.shop website, by email, telephone, social media services, contracts, customer meetings and other situations in which the customer provides their information.

6. Regular Disclosures of Data and Transfer of Data Outside the EU or EEA

Data is not regularly disclosed to third parties. Data may be published to the extent agreed with the customer. Data may be transferred by Nordic Homesteads LTD outside the EU or EEA.

7. Principles of Register Protection

The register is processed with care and data processed through information systems is protected appropriately. When register data is stored on internet servers, the physical and digital security of the equipment is ensured. Nordic Homesteads LTD ensures that stored data, server access rights and other information critically important to the security of personal data are handled confidentially and only by employees authorised to do so within their roles.

8. Right of Access and Right to Correct Data

Every registered person has the right to check their data recorded in the register and request the correction of any inaccurate information or the addition of missing information. If a person wishes to check the data recorded about them or request its correction, the request must be sent in writing to the registration controller. Nordic Homesteads LTD may ask the person to provide proof of identity if necessary. Nordic Homesteads LTD will respond to the customer within the period set by the EU General Data Protection Regulation (usually within one month).

9. Other Rights Related to the Processing of Personal Data

Every registered person has the right to request the deletion of their personal data from the register ("right to be forgotten"). In addition, registered persons have other rights under the EU General Data Protection Regulation, such as the restriction of processing of personal data in certain situations. Requests must be sent in writing to the registration controller. Nordic Homesteads LTD may ask the person to provide proof of identity if necessary. Nordic Homesteads LTD will respond to the customer within the period set by the EU General Data Protection Regulation (usually within one month).