PRIVACY POLICY

Privacy statement in accordance with the EU General Data Protection Regulation (GDPR, 2016/679). The privacy statement also contains the information in the privacy policy referred to in section 10 of the Personal Data Act (523/1999).

RDX Sports Finland is committed to protecting the privacy of its customers and follows good data protection practices in all its operations. In this privacy policy, we explain what kind of personal data we may collect about you when ordering our products or contacting us through our website, as well as for what purposes we may use such information. The customer must accept the terms of this privacy policy before ordering from the online store.

1. Controller

RDX Sports Finland - X9 Ventures Group Oy ("RDX Sports Finland")
Business ID: 3363307-4
Kaiturinkatu 15 B 14
FI-33820 TAMPERE, Finland
+358 45 6717 427

2. Body responsible for register matters

You can ask more about data protection and the processing of personal data by e-mail: rdxsportsfi @rdxsports.com

3. Name of the register

RDX Sports Finland e-commerce customer register

4. Purpose of the register

The register shall be used for the following purposes:
  • Customer relationship maintenance, such as order processing, delivery, warranty matters and invoicing
  • E-commerce development, management and improvement of the user experience
  • Customer communications, marketing and marketing targeting
The processing of personal data takes into account the requirements of the EU's General Data Protection Regulation, and personal data is only processed between the customer and RDX Sports Finland's based on the customer relationship, the contract, the use of the site, the customer's express consent or legal obligations.

5. Information contained in the register

The customer register of RDX Sports Finland's online store contains the following information provided by the users themselves:
  • First and last name
  • Email
  • Telephone number
  • Delivery information
  • Payment/billing information
  • Information on possible marketing permissions and prohibitions
  • Product reviews
In addition, the register contains the following data observed from the use of the service or derived from analytics:
  • Purchase history, e.g. ordered products and their price information
  • Terminal identification (IP addresses)
  • E-commerce usage and browsing data
  • Information collected through cookies (for example, through which the customer entered the online store)
6. Regular sources of information

The information in the register consists mainly of the information provided by the customer himself on our website. Personal data can also be collected separately on forms on the controller's website, events and campaigns, as well as by phone during customer service calls.

7. Transfer of data to third parties

RDX Sports Finland's disclose data to third parties, e.g. in payment transactions, deliveries and for certain marketing purposes to provide the service. Such third parties include:
  • Carriers such as PostNord Finland
  • Payment intermediaries when paying with a debit card
  • Credit intermediaries when paying by invoice or installment

Under no circumstances may these third parties use the information provided for their own purposes and will only be provided with information that is essential for the realization of the service. We do not disclose, sell or rent your information to third parties.

In addition, RDX Sports Finland has the right/obligation to disclose personal data to the authorities in order to fulfil requests for information from them.

8. Transfer of data outside the EU or the European Economic Area

The e-commerce partner of RDX Sports Finland utilizes servers operating outside the EU (Canada/US) where the data in the register is stored. Otherwise RDX Sports Finland does not transfer the data in the register outside the European Union or the European Economic Area, unless it is necessary for the implementation of the service. If data is transferred outside the EU/EEA, an adequate level of protection of personal data is ensured in accordance with applicable legislation.

9. Principles of register protection

The databases related to the register are protected by firewalls, passwords and other technical means against external data breaches. Databases and their backups are located in locked premises. Only identified employees of the controller and companies acting on its behalf and on behalf of the controller have access to the data contained in the register with a personal right of use granted by the controller.

10. Rights of the data subject

Data subjects have the following rights:
  • Right of access to personal data concerning you
  • Right to rectification
  • Right to restriction of processing (e.g. right to prohibit marketing)
  • Right to object to processing
  • Right to withdraw consent (e.g. right to withdraw consent for marketing)
  • Right to lodge a complaint with a supervisory authority
In order to exercise the rights of the data subject, there will be a request for inspection, a prohibition, etc. send the person responsible for register matters to the e-mail address and it must be in writing and signed. With regard to requests for access, the controller may charge reasonable compensation for providing the information if the data subject exercises his or her right of access more than once a year.

In addition, it should be noted that in certain cases the enforcement of the rights of the data subject may be limited by official regulation/legislation that imposes requirements on, for example, the storage of accounting documents.

11. Data Retention

We will only retain your personal data for the time necessary to fulfil the purposes described in this privacy policy. The Finnish Accounting Act imposes obligations on the longer-term storage of data.

12. Use of cookies

A cookie is a small text file that the browser stores on the user's terminal device. Cookies contain a unique identifier that can be used to identify users. Our online service uses cookies to provide our service as user-friendly and high-quality as possible and to develop it further. The user cannot be identified by cookies alone.

There are two types of cookies, permanent and temporary (session cookies). Persistent cookies are stored as a file on your computer or mobile device, but never for longer than 12 months. Session cookies are temporarily stored and disappear when you end your browsing session. You can use your browser to easily delete cookies from your computer or mobile device. You can find instructions on how to use and delete cookies in your browser under "Help". You can turn off cookies or choose to receive information each time a new cookie is sent to your computer or mobile device. N.B! If you turn off cookies, you will not be able to benefit from all the features of the website.

13. Changes to the privacy policy

Due to the development of services and changes in legislation, we reserve the right to change the privacy policy. Significant changes to the privacy policy will be notified to registered customers in connection with the update of the terms and conditions.

Updated 23.7.2023