In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), we hereby provide information on how Nordico processes your personal data.
1. Data Controller
The controller of your personal data is:
Nordico sp. z o.o.
ul. Chorzowska 150
40-101 Katowice, Poland
KRS: 0001160704
VAT: PL6343053105
REGON: 541153408
2. Contact Details
For any matters related to the processing of your personal data, you can contact us at:
Email: iod@nordicofurniture.pl
We will respond without undue delay and no later than within the time limits set by GDPR.
3. Purposes and Legal Bases for Processing
Your personal data may be processed for the following purposes:
A) Processing necessary for the performance of a contract or to take steps at your request before entering into a contract – Art. 6(1)(b) GDPR
This includes:
placing and processing orders,
delivery of purchased products,
handling payments,
customer service communication related to the order,
maintaining a Customer Account in the online store.
B) Compliance with legal obligations – Art. 6(1)(c) GDPR
We process your data when required by law, including:
tax and accounting regulations,
consumer rights legislation,
warranty and complaint-handling obligations.
C) Data processed based on your consent – Art. 6(1)(a) GDPR
Only when you give voluntary consent:
newsletter subscription,
marketing communication,
promotional emails,
participation in marketing programmes.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
D) Legitimate interests pursued by the Controller – Art. 6(1)(f) GDPR
This includes:
internal administrative purposes,
fraud prevention,
securing online payments,
website analytics and statistics,
ensuring the safety of the Website,
handling queries not directly related to an order.
The Controller ensures that such processing does not override your rights and freedoms.
4. Recipients of Personal Data
Your data may be shared with trusted third parties strictly for the purposes listed above. These may include:
courier and logistics companies,
payment service providers (e.g., Stripe),
accounting and tax service providers,
IT service providers, including hosting and email services,
legal advisors, if necessary,
marketing tool providers, only if you have consented to marketing communications.
We never sell or rent personal data to third parties.
If data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are applied (e.g., Standard Contractual Clauses issued by the European Commission).
5. Storage Period
Your personal data will be stored for:
the time necessary to fulfil your order and handle post-sale obligations,
until the expiry of claims related to the Sales Agreement,
as required by tax and accounting laws,
until consent is withdrawn – for data processed based on your consent.
After these periods, the data will be securely deleted or anonymised.
6. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of access – to obtain confirmation whether we process your data and to receive a copy.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”).
Right to restriction of processing – we may store the data but not use it.
Right to data portability – to receive your data in a structured, commonly used electronic format.
Right to object – you may object to processing based on legitimate interest.
Right to withdraw consent – if processing is based on consent.
Right to lodge a complaint with a supervisory authority.
Customers residing in EU countries may submit complaints to the supervisory authority in their country of residence or to the Polish authority:
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
7. Voluntary or Mandatory Nature of Providing Data
Providing your personal data is voluntary.
However, failure to provide required data may prevent:
placing an order,
receiving a delivery,
registering a Customer Account,
subscribing to the newsletter.
8. Automated Decision-Making and Profiling
Your data is not subject to automated decision-making, including profiling, that would produce legal or significant effects for you.
Website analytics may involve automated tools, but they do not affect your individual rights or decisions related to your account or purchases.