Data Protection Statement (GDPR)

Updated

1. Data Controller

Name zlpoint

Vat No: 2126255-2

Address: PL 38, 00331 Helsinki

2. Contact person for data protection matters

Website administrator

3. Name of the register

zlpoint customer register and marketing register.

4. Purpose and legal basis for processing personal data

We process data for the following purposes:

Order delivery: A contractual obligation to deliver the products.

Customer service: Communication and handling of complaints.

Marketing: Sending newsletters (if the customer has given their consent).

Legal obligations: For example, compliance with accounting laws.

5. Types of data processed

We typically collect the following information from the customer:

• Name, address and telephone number

• Email address

• Order history and payment transaction information

• Online store browsing data (cookies)

6. Regular disclosure of information

Information is disclosed to third parties only to provide the service:

Logistics partners: (e.g. Posti, Matkahuolto) for delivery.

Payment intermediaries: (e.g. Klarna, Stripe) to make the payment.

7. Data retention period

We only retain information for as long as necessary:

Accounting data: 6 years from the end of the financial year (Based on law).

Customer information: As long as the customer relationship is active or until the customer requests deletion of the data.

8. Rights of the data subject

You have the right to:

1. Check information about yourself.

2. Demand correcting incorrect information.

3. Ask deletion of your data (right to be forgotten).

4. Prohibit direct marketing at any time.• IT partners: E-commerce platform provider and data center.

Scroll to Top