Privacy Policy – Nordic Figures
This Privacy Policy describes how Nordic Crafters (Business ID: FI2511604-2) processes personal data in connection with the Nordic Figures service, in accordance with the EU General Data Protection Regulation (GDPR).
Nordic Figures is a service operated by Nordic Crafters.
We reserve the right to update this Privacy Policy when necessary. The latest version is always available on our website.
1. Data Controller
Data Controller:
Nordic Crafters (Business ID: FI2511604-2)
Service name: Nordic Figures
Contact person:
Jyrki Parviainen
Email: info@nordicfigures.com
Address: Tikunselänpolku 85, 82220 Niittylahti, Finland
2. Legal Basis for Processing Personal Data
We process personal data lawfully, fairly, and transparently. Personal data is processed only when there is a valid legal basis, including:
- Performance of a contract (order fulfillment and production)
- Customer consent (e.g. marketing use of images, where applicable)
- Legitimate interests (customer service, quality control, fraud prevention)
- Compliance with legal obligation
3. Purpose of Processing Personal Data
Personal data is processed for the following purposes:
- Processing and fulfilling customer orders
- Producing personalized figurines
- Customer communication and support
- Payment processing
- Shipping and delivery
- Handling complaints and warranty matters
- Ensuring service quality and security
- Compliance with legal obligations
Customer-provided images and materials are used solely for the fulfillment of the specific order, unless the customer has given explicit consent for other use.
4. Types of Personal Data Processed
We may process the following categories of personal data:
- Customer name and contact details
- Billing and payment information
- Order and product information
- Uploaded images and reference materials
- Customer communications and feedback
- Technical data related to website usage
5. Use of Third-Party Services and Artificial Intelligence
As part of the production and order fulfillment process, Nordic Crafters may use trusted third-party service providers, including tools that utilize artificial intelligence.
By uploading images and placing an order, the customer consents to such processing for the sole purpose of producing the ordered figurine.
Third-party providers process data only under contractual agreements and appropriate data protection safeguards.
6. Data Disclosure and Transfers
Personal data is not sold or disclosed to third parties except when necessary for:
- Payment processing
- Production and fulfillment of orders
- Shipping and logistics
- Legal obligations or authority requests
Data may be transferred outside the EU/EEA if required for service provision. In such cases, appropriate safeguards are applied in accordance with GDPR.
7. Data Retention
Personal data is retained only as long as necessary for order fulfillment and related purposes.
Customer-provided images, production files, and related materials are stored for a maximum of six (6) months from the date of order acceptance, after which they are deleted unless a longer retention period is required by law.
Data may be deleted earlier at the customer’s request, where legally permissible.
8. Data Subject Rights
The data subject has the right to:
- Access their personal data
- Request correction of inaccurate data
- Request deletion of personal data
- Restrict or object to processing in certain situations
- Request data portability
- Withdraw consent at any time (where applicable)
- Lodge a complaint with a supervisory authority
Requests concerning data subject rights should be sent electronically. Identity verification may be required before fulfilling the request.
9. Automated Processing
Personal data may be processed using automated methods as part of order handling and production workflows. No decisions producing legal effects on the customer are made solely by automated means.
10. Contact
For privacy-related questions or requests, please contact:
Nordic Crafters
Email: info@nordicfigures.com