Privacy policy

1. General provisions

1.1. This privacy policy regulates the collection, processing and storage of personal data by Wedevise OÜ (registry code 14725511), located at Vabaõhumuuseumi tee 36, Haabersti linnaosa, Tallinn, Harju maakond 13516, Estonia — the data controller.

1.2. A data subject means a customer or natural person whose data is processed by the controller.

2. Collection and processing of personal data

2.1. Personal data is collected electronically via nordfoil.eu and email.

2.2. By sharing their data, the data subject grants the controller the right to collect and process it for the purposes defined in this policy.

2.3. The data subject is responsible for the accuracy of data submitted. Notify us immediately of any changes at info@nordfoil.eu.

3. Personal data processed

3.1. We may process the following data:

  • Given name and surname
  • Phone number
  • Email address
  • Delivery address
  • Payment information

3.2. Legal basis for processing: Article 6(1)(b) GDPR — processing necessary for contract performance; Article 6(1)(c) — legal obligation; Article 6(1)(f) — legitimate interests.

3.3. Purposes and retention periods:

  • Order processing — 7 years (accounting obligations)
  • Customer support — 3 years
  • Marketing — until consent withdrawn
  • Security — as required by law

3.4. We share personal data with:

  • Delivery partners (Omniva, SmartPosti, DPD) — for shipment
  • Accountants — for financial obligations
  • Maksekeskus AS (MakeCommerce), Liivalaia 45, 10145 Tallinn, reg. code 11962210 — as authorised payment processor. Personal data necessary for payment processing is transmitted to MakeCommerce. MakeCommerce processes this data in accordance with their privacy policy available at makecommerce.net.

4. Rights of the data subject

4.1. You have the right to access, correct or delete your personal data.

4.2. You may withdraw marketing consent at any time.

4.3. Contact: info@nordfoil.eu

4.4. You may file a complaint with the Data Protection Inspectorate (aki.ee).

5. Final provisions

5.1. This policy complies with GDPR (EU) 2016/679 and Estonian Personal Data Protection Act.

5.2. We may amend this policy and will notify users via nordfoil.eu.