Nordic Shipping App Data protection notice

Woolman produces, develops and administrates an application; Nordic Shipping App to be integrated to e-commerce platforms. Woolman collects, stores and processes personal data of Data Subjects in accordance with EU General Data Protection Regulation, GDPR and national privacy legislation. We are executing clearly defined data protection processes, documentation, policies and data processing actions. Woolman is the role of the data processor and only processes the data necessary to provide the service, as described below. 

1. Data Processor

Woolman, business ID: 2817702-7

2. Data contact point

Woolman, Hannikaisenkatu 20, 40100 Jyväskylä, Finland. Contacts and requests regarding data control and personal data are answered at support@woolman.io  

3. Basis for processing personal data

The legitimate basis for processing personal data is a contractual relation between Woolman and e-commerce Merchant, who has acquired the Nordic Shipping Application (NSA) add-on. NSA add-on processes personal data of e-commerce customers and forwards them to shipping companies to ensure product deliveries. Processing of personal data can be outsourced within the corporation or to third parties in compliance with EU data protection regulation and national legislation.

4. Data register content

The NSA add-on processes delivery recipient’s or authorized third parties (i.e. deliveries to third parties) personal data that is essential to perform the service.

The register may contain following data:

  • recipient´s or authorized person´s first name and last name
  • street address, zip code, city, state, country, telephone number and e-mail address for sending notices of arrival and making the delivery
  • prospective additional delivery address
  • prospective other information related to delivery

5. Storage and storage period of data

NSA Data is stored on servers located within the European Union. Data will be stored only for as long as the data controller has legitimate need for in regard of purposes of the processing. Per se data will be stored for as long as completing the delivery requires. When personal data is no longer needed for the purpose of processing, and no later than 60 days, all data and backup files will automatically be deleted from register. 

6. Regular sources of data

NSA add-on is an independent application that the e-commerce Merchant can integrate onto their e-commerce platform through contractual relation. Add-on applications commit to comply with e-commerce platforms´ own terms, instructions and agreements, that the Merchants have accepted when establishing their e-commerce on these platforms. Currently NSA add-on is in compliance of the following e-commerce platforms terms and agreements: Shopify inc. (https://www.shopify.com/legal). Through contractual relation with the e-commerce Merchant, the NSA add-on is granted legitimate access to Merchant’s e-commerce platform. The NSA add-on collects the personal data described in this privacy policy and forwards it to shipping companies.

7. Regular transfers of data within EU of outside of EEA

Personal data is processed by Woolman or third parties working on behalf of Woolman. No other transfers of personal data will be carried out. Third parties may be e-commerce platform providers with whom e-commerce Merchants are in contractual relation with. Personal information may be transferred or admitted with consent from the customer into temporary records. The data in these registers will only be handled for a specific purpose with clearly defined instructions.  

Data will be admitted to authorities as required by law or in legal proceedings, such as investigating and preventing malpractice.

Data can, when necessary, be transferred outside of EU or EEA in compliance of the EU Data Protection Regulation and national legislation. Woolman  reserves the right to transfer all data, including personal data to a third party in corporate acquisition, merger or other business arrangement.

8. Principles of protecting the register

All personal information stored is confidential. Personal data is only processed in technical transfers through secure interfaces. Only persons for whom it is imperative due to their job description to have access to systems will have the right to process personal data. Data is stored in systems that are protected with high technical protection measures, and access is limited with user control and identification.

9. Rights of the registered Data Subject

Woolman shall comply with Data Subjects rights as instructed  and requested by the merchant using Nordic Shipping App.

10. Changes to the Privacy Policy

Woolman is developing continuously and reserves the right to make changes or updates to this Privacy Policy at any time. Changes may also be made on grounds of changing legislation. All changes are effective immediately upon posting. Woolman Inc. encourages Data Subject to periodically review this page for the latest information on our privacy policies.