Privacy Policy of Nordic Crust Bakery

1. Introduction and Company Information

Welcome to the privacy policy of Nordic Crust Bakery. We are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and protect your information when you visit our bakery or interact with us.

Company: Nordic Crust Bakery
Address: Leipurinkatu 12, 00120 Helsinki, Finland
Email: [email protected]
Phone: +358 9 876 5432

2. Data Collection and Processing

We collect personal data that you provide to us directly, such as when you make a purchase, subscribe to our newsletter, or contact us. This may include your name, email address, phone number, and payment information.

3. Purpose of Data Processing

We process your personal data for the following purposes:

To fulfill orders and deliver our products to you.
To manage your inquiries and provide customer support.
To send you promotional materials and updates, if you have consented to receive them.
To improve our services and enhance your experience with us.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Performance of a contract: To fulfill our contractual obligations to you.
Consent: Where you have given us explicit consent to process your data.
Legitimate interests: To improve our services and for marketing purposes.
Compliance with legal obligations: To comply with applicable laws and regulations.

5. Data Sharing and Third Parties

We may share your personal data with third-party service providers who assist us in providing our services, such as payment processors and delivery companies. These parties are obligated to protect your data and only process it on our behalf.

6. Data Transfer to Third Countries

Your personal data may be transferred to countries outside the European Economic Area (EEA). We ensure that such transfers are conducted in compliance with applicable data protection laws, using appropriate safeguards.

7. Storage Duration

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the data is no longer needed, we will securely delete or anonymize it.

8. User Rights

You have the following rights regarding your personal data:

Access: Request access to your personal data.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your data.
Restriction: Request restriction of processing.
Data Portability: Request transfer of your data to another service.
Objection: Object to the processing of your data.

9. Withdrawal of Consent

If you have given consent for data processing, you have the right to withdraw it at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

10. Right to Complain

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

12. Contact Information

If you have any questions or concerns about this privacy policy or our data practices, please contact us at:

Email: [email protected]
Phone: +358 9 876 5432

13. Changes to Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes. Please review this policy periodically for updates.