Privacy Policy

COOKIES

Like most websites on the web we utilize “cookies”. A cookie is a small file that is stored on your computer (by your browser) and store text based values. The information stored in those files is used to be able to provide a good persisting customer experience i.e. not showing “welcome”-messages the first time you use the website, storing the products in your cart, your choices of language or currency. The allowed life time of this file is set depending on the purpose. You can prevent the usage of cookies by disabling the feature in your browser.

We are committed to only store what is necessary as part of pursuing our legitimate interest to maintain and develop our businesses. We are also committed to not storing anything longer than necessary or legally permitted.

AUTOMATIC COLLECTION OF DATA

When using this website we collect information regarding the usage of our services with the purpose of creating a good over all user experience and providing relevant information in marketing. The information is stored in an anonymized state meaning that it is not tied to any personal information.

Example of this is Google (Analytics and Tag manager). Google will on our behalf store and process anonymized data regarding your usage of our services. The nature of the data includes, but is not limited to, what pages you have visited, where you use our services from, and what device you are using. You may at any time withdraw your consent (opt-out) and prevent data from your usage being stored by installing the browser plugins provided by Google for this sole purpose. Google may store this information on servers located outside of the European Union. Google is thereby certified and compliant with everything required under “EU-US Privacy Shield” and achieves highly sufficient security for handling and storing data of this type.

MANUALLY PROVIDES PERSONAL DATA

When you create an account, make a purchase, request information, or otherwise interact with us, we may ask for information to be able to fulfill your request. NordicPosterStore processes personal data to perform our contractual obligations and to comply with legal obligations. Furthermore, we process personal data to pursue our legitimate interest to maintain and develop our businesses.

Example of what we may ask for:

• Your Name.
• Your email address.
• Your address and phone number.
• In specific cases usernames and passwords, feedback, age, gender, and language.

DATA PROCESSING FOR PAYMENT

We use Stripe as our payment processor to enable you to use the Credit Cards and Swish and any other applicable method authorized by you and provided by our payment service provider.

A essential part of the services provided by us is being able to purchase our goods and services. We do this using partners that we have rigorously evaluated in terms of security and compliance. NordicPosterStore does never store or process information such as, but not limited to, credit card numbers or bank accounts. Any such information entered on our website or as a part of our services is only processed by the payment gateway.

WHAT INFORMATION DO WE COLLECT AND WHY?

• Providing products and services - We may use your personal data to provide you with our Services and to ship and deliver products you have requested or ordered, to process your requests or as otherwise may be necessary to perform the contract between you and us, to ensure the functionality and security of our services and correct delivery, to identify you as well as to prevent and investigate fraud and other misuses.
• Communication - We may use your personal data to communicate with you, for example to inform you that our Services have changed or to send you critical alerts and other such notices relating to our Services and Products and to contact you for any sales related purposes.
• Marketing - advertising and making recommendations: With your consent, with acceptance of our terms and condition policies, or when otherwise allowed, we may contact you to inform you of new Products, Services or promotions we may offer and to conduct market research. We may also use your personal data to personalize our offering and to provide you with more relevant Services and to display customized content and advertising in our Services. This may also include displaying third party content.

SHARING YOUR PERSONAL DATA

We will never sell, lease or rent your personal data and may only disclose your personal data to third parties in the circumstances stated below.

• Companies in NordicPosterStore's corporate structureWe may share your personal data with other NordicPosterStore associated companies (affiliates or parent companies) or authorized third parties who process personal data on behalf of us, but only for the purposes described in this Policy and while the party are performing services for NordicPosterStore.
• Mandatory disclosures.We may access, disclose and preserve your personal data, when we have a good faith belief that doing so is necessary to: (1) comply with applicable law or respond to valid legal process from competent authorities, including from law enforcement or other government agencies; (2) protect our customers, (e.g. from spam or fraud and/or preventing serious injury or loss of life); (3) operate and maintain the security of our Services, including to prevent or stop an attack on our computer systems or networks; or (4) protect the rights or property of Mapiful, including enforcing the terms governing the use of the Services, possibly in cooperation with law enforcement agencies.
• Mergers and Acquisitions.If NordicPosterStore is involved in a merger, acquisition or asset sale, we may transfer personal data to the third party involved. However, we will continue to ensure the confidentiality of all personal data.
• Companies listed under “Data shared with Third parties”

DATA SHARED WITH THIRD PARTIES

We share personal data to pursue our legitimate interest to maintain and develop our businesses but only to the following parties:

• Gelateo Sverige AB.Gelato provides NordicPosterStore with fulfillment and production services.
• StripeStripe is our payment gateway and when paying for our products or services we provide Stripe with the required information to i.e but not limited to perform security and fraud validation, and store required transaction data applicable by law.

SHARING YOUR PERSONAL DATA YOUR RIGHTS REGARDING PERSONAL DATA

Upon request individuals have the right, under the General Data Protection Regulation (GDPR) “to be forgotten”. This right is to be exercised if you wish to have all information not required by other applicable laws or regulations removed. Examples of such information includes, but is not limited to data regarding financial transactions and order information. Upon such requests we will within in reasonable time and manner manner remove applicable information. You may at any time exercise the right and opt out using the tools and services provided by our partners including “unsubscribe links”. Contact our DPO (Data Protection Officer) if you have questions.

Upon request individuals have the right to request all records of personal data we currently store in a commonly used and machine-readable format. Contact us if you have questions.

SAFEGUARDING PERSONAL DATA

By using the Services, you give us your consent to store, process and transfer your Personal Data, that we have collected, outside of your country of residence to the countries where the Data Hosting Providers' servers are located. In some instances you may use our Services in another country than where the Data Hosting Providers' servers are located and therefore your personal data may be transferred across international borders outside the country where you use our Services, including from countries outside the European Economic Area (EEA). In such cases we ensure that there is a legal basis for such a transfer and that adequate protection for your personal data is provided as required by applicable law, for example, by using standard agreements approved by relevant authorities (where necessary) and by requiring the use of other appropriate technical and organizational information security measures.

We do not store personal data longer than is legally permitted and necessary for the purposes of providing our services. The storage period depends on the nature of the information and the purposes of processing. The maximum period may therefore vary per use.