Privacy statement

Nanso Group Oy Privacy statement

1 Common

Nanso Group Oy is committed to protecting the privacy of its customers. We handle your data responsibly and want to be worthy of your trust. You yourself can influence how and to what extent your data is processed. In this data protection statement, we tell you about your rights to your own personal data and how you can use your rights.

The customer must accept the terms of this privacy statement in order to use the services of the Nanso.com online store and loyalty program.

2. Registrar

Nanso Group Oy (Y-ID 0151534-8)
Vilhonvuorenkatu 11 A
00500 Helsinki

3. The person handling registry matters

Emma Albrecht

Email: data protection@nansogroup.com

4. Why and how we collect information about you

We want to create better and better services for our customers. The personal information collected about you helps us understand our customers better and develop our services. We process your personal data with your consent and on the basis of our legitimate interest in order to provide our services, manage the customer relationship or other relationship comparable to them and the obligations arising from them, maintain customer contact, handle complaints and marketing. Our direct marketing to consumers is always based on prior consent, which you can withdraw at any time.

We process your personal data for the following purposes:

Orders : We use your personal information to process and deliver the order.

Customer service: our customer service uses your personal data in relation to order processing and delivery, to answer your possible questions and to handle possible complaints.

Loyalty system : We use the personal data you provide for account management so that you can, for example, view your order history, save your delivery addresses and manage your personal settings, such as marketing permission. We also use your personal data to identify loyal customers in our stores and to monitor your purchases and the loyalty benefits you earn.

Statutory obligations: We process personal data to fulfill our statutory obligations, for example in accounting.

Marketing:

After you have given us marketing permission, we will use your personal data for the following marketing purposes, among others:

If you have given us your phone number, postal address or e-mail, we will use this information to send marketing messages (e.g. offers and current product news) by e-mail, text message or post. You can cancel our electronic newsletter from the cancel newsletter subscription link in the newsletter. You can cancel text message marketing free of charge according to the instructions in the text message. If you have added products to the shopping cart in our online store, we can send you a reminder by e-mail that the order is incomplete and thus you can easily continue shopping where you left off. We may send you invitations to customer surveys or research aimed at developing our services and products. In addition, based on your behavior on our website, we will show you advertisements on other sites about our brand and products that we believe will be of interest to you.

If you have not given us permission for direct marketing, your personal data will be used based on our legitimate interest to provide our services, manage the customer relationship or other comparable relationship and the obligations arising from them. Without marketing consent, we will not market to you directly, but based on your behavior on our website, we will show you advertisements on other sites about our brand and products that we believe will be of interest to you. We use partners and their publishing platforms for remarketing. Remarketing is based on cookie technology. You can read more about this topic in this privacy statement in section "6. Cookies”. If you wish, you can also refuse marketing cookies when you come to our site.

When processing your personal data, we always try to ensure that the processing of your personal data is factually justified and necessary in relation to the purposes of use.

5. What information can we collect about you?

The use of certain services, such as participating in a campaign, processing a complaint or buying products or services from an online service, requires the provision of personal information. If you decide not to provide us with your personal information, we may not be able to offer you all offers or content or provide you with the same targeted and personal service as if we had access to your information.

Information provided by the user himself or information that identifies the person

5.1.1. In the online store:

• Identification information, such as name, online store username and password when registering
• Address, email address and phone number for order delivery
• Information about marketing permits and prohibitions
• In order to process your payment, we collect the necessary information to pay for your purchases. We collect, among other things, information about the payment method you use and invoicing information, if you order our products by choosing an invoice as the payment method.
• When you choose a Klarna invoice as the payment method, the personal identification number is asked to identify the customer when entering into a credit agreement. Asking for a personal ID takes place in Klarna's system, the information is not saved in Nanso's system.
• We also collect customer feedback
• Information about browser version, device type and IP address. We can also collect information about your page downloads, time spent in online services and movement in online services.

5.1.2. In the loyalty program:

• Identification information such as name, username and password for the loyalty account
• E-mail address, e.g. for communicating offers and current news
• Favorite store to ensure targeted communication for you
• Birthday to convey specific birthday benefits and greetings and to understand the age profile of the customer base
• Information about marketing permits
• Purchases, received and used loyalty benefits, received newsletters and text messages
• Customer feedback

5.2. Data observed about the use of the services and derived with the help of analytics

• Purchase event and transaction information
• Reservations, benefits used, newsletters received (e.g. whether the message has been opened)
• Delivery information, such as the selected delivery method and delivery address
• Product reviews
• Online store usage and browsing data as well as identification data of the terminal device
• Information and identifiers used for product recommendation and other targeted content

6. Cookies

We collect information about the use of our online services using cookies, for example. A cookie is a small file that a website stores in your browser and that sends us information when you visit our site again. We use cookies on our website that work according to their purpose - they improve the user experience or track traffic on Nanso's website. We may also use cookies for page targeting, personalization and advertising. We ask for your consent on the website to set cookies other than those that are necessary for the use of the website.

Cookies are divided into functional i.e. necessary cookies, analytics cookies and marketing cookies. Functional cookies are necessary for the usability of the site. Necessary cookies enable various functions on our site, such as the Shopping Cart and registration. You can block functional cookies in your browser settings, but this may affect the site's functionality. Analytics cookies allow the site's traffic to be measured and traffic sources to be seen in larger data masses. They also help us understand which products are the most popular products. Marketing cookies make it possible to target advertising on the sites of our marketing partners, which makes the advertising content as interesting as possible for you. If you do not accept marketing cookies, advertising will be more random.

If you have already set the cookie settings once, you can change the cookie settings from the round element at the bottom left of the site or from the Cookie policy page, where you can also find more information about the cookies on our site.

7. Where do we get your personal data from?

The main source of personal data is your own notification or purchase and transaction data in the Nanso.com online store or in our store. We also obtain personal data by observing and analyzing the use of the service as described in sections 5 and 6. In addition to this, we may receive personal information from our partners and authorities, such as the Population Register's update service and Suomen Asiakastieto Oy's credit information register.

8. Who processes my data?

Only designated Nanso Group employees can access personal data and they are bound by a duty of confidentiality. Access to personal data is only granted when it is necessary for the performance of work tasks.

We use trusted contractual partners, in which case information can be transferred to a third party. The agreements with all partners take into account the requirements set by the EU data protection regulation and other legislation.

9. How is my data stored and protected?

Your personal data is stored electronically and appropriately protected from outsiders by physical locking, firewalls, passwords and other technical protection measures.

10. How long will my data be stored?

We only keep your personal data for the time necessary to fulfill the purposes of use described in this statement and to fulfill the obligations set by law, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

11. Will my personal data be transferred to third parties?

We may hand over some necessary personal data to third parties to guarantee delivery and for marketing purposes. Your information is also forwarded to the credit granting agency in connection with the credit decision. If necessary, we also hand over information to the authorities.

We also use personal data with third parties for analytics and personalization purposes. We use purchasing behavior and browsing data with partners so that we can better offer products and offers that interest you.

• We pass on information to the following third parties:
• For analytics and statistics partners
• For product recommendation and personalization partners
• To email marketing partners, if the customer has given permission for direct marketing
• For the transport company, if the selected delivery method is transport to the pick-up point, the nearest post office or to the destination
• When paying with a payment card to a payment intermediary
• To the credit provider, when the customer chooses the credit company's invoice or partial payment as payment method
• To the invoice operator, when an invoice is selected as the payment method
• To the debt collection company, when the invoices are due and going into debt collection

When transferring and processing data, Nanso takes care of a high level of data security and protection in accordance with the EU Data Protection Regulation.

12. Data transfer outside the EU/ETA

The service provider of the Nanso.com e-commerce platform is located in Canada, and in connection with its data processing, data may also be transferred to the United States. Therefore, when you shop in our online store, your data can be transferred to the United States and Canada to enable your online shopping.

According to the decision of the EU Commission, the level of data protection in Canada is sufficient, which secures the transfer of personal data to Canada. If we transfer your data to the United States or other countries outside the EEA, the legality of the data transfer is ensured by contractual means (e.g. using model clauses approved by the European Commission) or by other methods approved by data protection legislation (such as based on decisions on the adequacy of data protection).

13. What rights do I have in relation to my data?

You have the right to:

• Get a copy of your personal data
• Requests correction or deletion of personal data about you
• To withdraw your consent to data processing at any time

Please note that if the processing of your personal data is necessary, for example, to deliver your online store order, we cannot delete your data.

At any time, you have the right to prohibit the processing of your data for direct marketing (right to object). The refusal can be done directly from our newsletter or by contacting our customer service. Please note that despite the ban on direct marketing, you can still see our ads on online services outside of Nanso and still receive customer communications from us, such as the order confirmation regarding the order you placed in the online store.

You can make an individualized request to use the above rights in writing to the address " tietosuoja@nansogroup.com ". To protect your personal data, we verify your identity.

• Who can I contact?

You can contact us for questions related to the processing of personal data and the privacy statement by email: tietosuoja@nansogroup.com

In other matters, our customer service can help: kaspalvelu@nanso.com