Privacy Policy
In this Privacy Statement, we will explain your rights regarding the processing of your personal data and why we process personal data. This Privacy Statement applies to all products and services used through the NOMU website.
By using our website, you accept this Privacy Statement.
Data Controller
Nomu Kidswear Oy (“NOMU” or “we” "our")
Business ID: 3276329-9
hello@nomufashion.com
www.nomufashion.com
Contact Information for Matters Concerning the Register
NOMU Customer Service
hello@nomufashion.com
Purpose and Legal Basis for Processing Personal Data
The processing of personal data is based on the data controller's legitimate interest (as described in more detail in section 4), contractual relationship, and/or compliance with the data controller's legal obligations. The processing of personal data can also be based on the data subject's consent, which then constitutes the legal basis for the processing in applicable cases. The data controller has a legitimate interest in conducting reasonable, justified, and legal sales and marketing activities, including related customer profiling.
Description of Personal Data
NOMU processes personal data within the limits allowed by legislation for the management and development of customer relationships. Primarily, we collect personal data for processing orders placed on our online store.
Personal data processed in the register can be used for the following purposes:
Orders
We need personal data for processing orders, including order confirmation and delivery communications. Additionally, information may be used for billing and debt collection purposes, as well as handling potential complaints. We do not store payment information other than the payment method and prices for possible refunds.
Offering products and Marketing
We may process personal and shopping cart data, as well as purchase history, to profile customers for offers, benefits, marketing activities, and customer communications targeting their interests. Personal data is also processed when sending newsletters, participating in contests and giveaways, or other marketing activities.
Customer Account
If you have created a customer account on our website, we use your personal data for account management, allowing you to view your order history, create wish lists, and save your shopping cart. Address information is also stored for future orders, and address details can be modified or deleted by either the customer or NOMU.
Product and Service Development and Anonymous Reporting
We process personal data to improve our existing products and services and develop new ones. In this context, we may combine feedback received and messages left with our customer service with user accounts. We use responses from consumer surveys and questionnaires to analyze customer preferences, expectations, and opinions about our products, website, and services. Anonymous data is used for reporting purposes. Anonymous data cannot be used to identify individuals, and we use it to analyze the achievement of commercial objectives, such as the total number of visitors to our website and the duration of their visits.
Customer Service
Our customer service processes your personal data when you contact us through any channel. We may combine information collected by customer service with other personal data, such as purchase history, to provide personalized and efficient service.
Detection and Prevention of Illegal Activity
In some cases, we may be required to disclose your data, including personal data, under the law or regulations, such as in the context of legal proceedings. We may also disclose your data in response to a challenge, court order, or other legal proceeding or request from an authority.
Automatically Collected Personal Data
When you place an order or visit our website, we automatically collect information about your visit. Some of this information may be classified as personal data. Such information includes:
- Browser used, operating system, device model, IP address, connection time, and connection duration.
- Identifying information and registration date for logged-in customer accounts.
- Location data (including Wi-Fi access point data).
- Websites through which you accessed the www.nomufashion.com website.
- Web behavior data on our website (e.g., clicks and page navigation, keywords used).
- Cookies and other identifying information.
- Language.
- Marketing data: offers, promotions, and their use.
- Individual product-level purchase history and shopping cart data.
- Additionally, information about customers who have subscribed to our electronic newsletter is collected for newsletter management and related matters.
Directly Collected Personal Data
Directly collected data refers to information that customers provide to us directly, for example, when placing an order, registering as a seller, or contacting our customer service.
Directly collected data includes:
- Subscriber contact information (name, email address, phone number, postal address, and optionally other voluntarily provided personal data, such as company name or date of birth).
- If the recipient of an order is different from the purchaser, the recipient's name and postal address.
- Information about marketing permissions and prohibitions.
- Message history with our customer service via chat, Facebook, the website's contact form, or email.
- Contact information provided when participating in various contests and giveaways.
- Sharing Personal Data with Others Within the limits allowed by law, we may disclose your personal data to Nomu's partners as necessary to provide our services. Third parties include personal data processors and only third parties approved by Nomu that help us provide our services and improve the customer experience. When using subcontractors or third parties, we ensure that they process personal data in accordance with data protection regulations.
To provide an excellent customer experience and offer our services, we may need to transfer personal data to a third-party service provider's server or resources located outside the European Union or its economic area. In these cases, we ensure that appropriate contractual measures are in place for the transfer of personal data (e.g., commitment to the European Commission's standard contractual clauses) and that the transfer has an appropriate legal basis and complies with legal confidentiality requirements.
Third parties to whom we must disclose data for order processing are listed below. Additionally, third parties we use for marketing, website development, and analysis are listed below. This Privacy Statement covers the use of your data only by NOMU; please also review our partners' privacy statements.
Transport companies: Posti, GSL, DHL
Payment service providers: PayPal, Apple Pay, ShopPay, Google Pay, PayTrail
Online store system and order processing: Shopify
Others: Facebook, Instagram, Google, Tiktok, Pinterest
Cookies
A cookie is a small piece of text or a file that a website sends to your browser. It helps the website remember your visit information, such as your chosen language and other settings. Cookies make your next visit smoother and improve your experience on the website. Cookies play a crucial role in managing website content.
NOMU uses Shopify as the technical platform for its online store, which uses cookies. Cookies are used to calculate page visit counts, enhance and improve website functionality.
You can learn more about Shopify's use of cookies for its online store platform here.
Personal Data on Social Media
NOMU's social media sites, such as Facebook, Instagram, and YouTube, are public, and the registries formed on these sites contain information that individuals voluntarily bring to the public, such as their names, reviews, likes, shares, and comments. We are not responsible for the personal data of users registered on social media sites or their protection.
When you interact with us through social media, we may automatically collect, store, and retain data collected from your use of these channels. For example, if you click the "Like" button on our social media pages or tag your friends in our posts, we store this information. This information is most likely non-identifiable data, but it may include personally identifiable information depending on your browser settings for that channel.
Content published on social media is data that you voluntarily disclose to the public, and it may be associated with you depending on the content. We collect, store, and use this content and other information disclosed on our social media channels. We may also use information that you have allowed the social media channel to share with us or that can be shared according to your user settings on these sites.
Retention and Storage of Personal Data
The register is stored electronically and protected appropriately from external threats with firewalls, passwords, and other industry-standard security measures. Only specific employees of the data controller or companies acting on behalf of the data controller are granted access to the personal data contained in the register. All employees with access to personal data are bound by confidentiality obligations.
NOMU retains your personal data for as long as necessary to fulfill the purposes specified in section 4 of this Privacy Statement. NOMU may retain some personal data beyond the above-mentioned period as necessary to comply with legal obligations, such as accounting or consumer trade responsibilities, and to demonstrate their proper execution.
User Rights Regarding Personal Data
Customers have the right to review the personal data stored in the register concerning them. A written request for inspection must be sent to the data controller using the contact details specified in section 2 of this Privacy Statement. A personal identity document must be presented when making a personal inspection request. NOMU will respond to data inspection requests in writing.
If there are errors in a customer's data, the customer can request the data controller to correct them. Customers have the right to object to the use of their data for direct marketing or market and opinion research at any time by notifying the data controller. You can also unsubscribe from direct marketing through your customer account or by following the instructions provided in the marketing message.
Customers have the right to delete personal data processed by NOMU at any time, except in the following situations: the customer has an open matter with customer service; the customer has an outstanding order that has not yet been fully delivered; there is a suspicion of misuse of our services by the customer, or the customer has misused our services in the last four years; the customer has unpaid debts to NOMU regardless of the payment method used; if the customer has made purchases in the online store, we must retain the personal data related to the purchase for accounting regulations.
Customers have the right to file a complaint with the competent supervisory authority if they believe that NOMU has not complied with applicable data protection regulations in its operations. The competent supervisory authority for matters related to the processing of customer personal data is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).
Children's Personal Data
Through our online store, we only accept orders from individuals who are 18 years of age or older, so we do not knowingly collect children's personal data through our website.
Changes to the Privacy Policy
NOMU has the right to change this Privacy Statement. The latest version of the Privacy Statement from NOMU can always be found on this page along with the publication date. We recommend reviewing the content of the Privacy Statement regularly on our website.
This Privacy Statement was last updated on March 2, 2024.
