Effective Date: 2025-03-10
1. Introduction
Welcome to OnTheDesk, an online shop operated by Zorice, a company registered in Finland (Business ID: 3504662-3). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Finnish data protection laws. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase.
Contact Information:
- Email: onthedeskbusiness@gmail.com
2. Data We Collect
We collect the following personal data to provide our services:
- Name
- Address
- Phone number
- Email address (for account registration, order confirmation, and communication)
- Payment information (processed securely via our payment provider)
- IP address, browser type, and device information (for website functionality and security)
When we collect it:
- When you register an account
- When you place an order
- When you subscribe to our newsletter
- When you contact us for support
- When you browse our website (via cookies and tracking technologies)
3. Purpose of Data Collection
We use your personal data for the following purposes, with the legal bases specified:
- Order processing: To fulfill and deliver your purchase (contractual necessity).
- Customer support: To respond to inquiries or issues (legitimate interests).
- Marketing communications: To send newsletters or offers, only if you have explicitly consented by subscribing (consent). You can withdraw consent at any time via the unsubscribe link or by contacting us.
- Website improvement and security: To analyze site usage and protect against threats (legitimate interests).
4. Sharing of Data
To provide our services, we share only necessary data with trusted third parties:
- Revolut: For secure payment processing.
- Posti: For shipping and logistics.
- WooCommerce: For website platform and order management.
These partners are contractually obligated to comply with GDPR and protect your data.
5. User Rights
Under GDPR, you have the following rights:
- Access: Request a copy of your data.
- Modify: Correct inaccurate information.
- Delete: Request deletion of your data (except where legally required, e.g., for tax purposes).
- Portability: Receive your data in a structured format.
- Object: Opt out of marketing or object to processing based on legitimate interests.
- Complain: Contact the Finnish Data Protection Ombudsman if you believe your rights are violated.
To exercise these rights, contact us at customer-service@onthedesk.fi
6. Data Security and Retention
We implement strict security measures, including:
- Encryption: For sensitive data like payment details.
- Secure servers: With restricted access.
- Access controls: Only authorized personnel can access your data.
Retention periods:
- Order data: Retained for 3 years to comply with Finnish tax and accounting laws.
- Account data: Kept until you request deletion or after 3years of inactivity.
- Marketing data: Until you withdraw consent.
7. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted on our website with a new effective date. For significant changes, we will notify you via email or a prominent site notice.
8. Contact Us
For questions or concerns, contact:
- Email: customer-service@onthedesk.fi