Woolman produces, develops and administers an application; Live Video Shopping App Integration for Shopify ecommerce platform. Woolman collects, stores and processes personal data of Data Subjects in accordance with EU General Data Protection Regulation, GDPR and national privacy legislation. We are executing clearly defined data protection processes, documentation, policies and data processing actions.

1. DATA CONTROLLER 

Woolman Oy, business ID: 2817702-7

2. DATA CONTACT POINT

Woolman Oy, Hannikaisenkatu 20, 40100 Jyväskylä, Finland. Contacts and requests regarding data control and personal data are answered at support@woolman.io  

3. NAME OF REGISTER

Live video shopping app register

4. BASIS FOR PROCESSING PERSONAL DATA

The legitimate basis for processing personal data is a contractual relation between Woolman and e-commerce Merchant, who has acquired the Live video shopping app integration add-on. Live video shopping app integration does not collect personal data of e-commerce customers, we only collect the data about the purchases made through the App. Processing of data can be outsourced within the corporation or to third parties in compliance with EU data protection regulation and national legislation.

5. DATA REGISTER CONTENT

The Live video shopping app integration processes ecommerce purchase data that is essential to perform the service. No personal data about the ecommerce customer is stored.

The register may contain following data:

• statistics of the app usage: products added to cart, video viewing minutes, other interactions
• statistics of the ordered products, including product titles and purchase sums

The Live video shopping app integration also stores following information about the shop and merchant that are used in serving the app. Merchant data may contain following data:

• Shop name and domain
• Contact information
• Locale, currency, and Shopify plan in use
• Other shop specific settings
• Stored information about the shows created at the chosen Live Video App

6.  STORAGE PERIOD OF DATA

Data will be stored only for as long as the data controller has legitimate need in regard to the purposes of the processing. When data is no longer needed for the purpose of processing, and no later than after six (6) months, all data and backup files will automatically be deleted from the register. 

7. Regular sources of data

The Live video shopping app integration add-on is an independent application that the e-commerce Merchant can integrate onto their e-commerce platform through a contractual relation. Add-on applications commit to comply with e-commerce platforms’ own terms, instructions, and agreements, that the Merchants have accepted when establishing their e-commerce on these platforms.

Currently the Live video shopping app integration add-on is in compliance with the following e-commerce platforms terms and agreements: Shopify inc. (https://www.shopify.com/legal). Through a contractual relation with the e-commerce Merchant, the Live video shopping app integration is granted legitimate access to Merchant’s e-commerce platform. The Live video shopping app integration add-on collects the personal data described in this privacy policy and forwards it to the technology partners.

We use cookies. The following information may be collected with the help of tracking cookies: your IP address, when you visited, pages you visited and the duration, browser. You may change the preferences in your browser or device to prevent or limit your device’s acceptance of cookies.

8. REGULAR TRANSFERS OF DATA

Data is processed by Woolman or third parties working on behalf of Woolman. No other transfers of data will be carried out. Third parties may be e-commerce platform providers with whom e-commerce Merchants are in contractual relation with. Information may be transferred or admitted with consent from the customer into temporary records. The data in these registers will only be handled for a specific purpose with clearly defined instructions.  

Data will be admitted to authorities as required by law or in legal proceedings, such as investigating and preventing malpractice.

Data can, when necessary, be transferred outside of EU or EEA in compliance with the EU Data Protection Regulation and national legislation. Woolman reserves the right to transfer all data, including personal data to a third party in corporate acquisition, merger, or other business arrangement.

 9. JOINT CONTROLLERS WITH FACEBOOK

We have conducted separate documentation on our joint controller role with Facebook and you can read it here.

10. PRINCIPLES OF PROTECTING THE REGISTER

All information stored is confidential. Data is only processed in technical transfers through secure interfaces. Only persons for whom it is imperative due to their job description to have access to systems will have the right to process data. Data is stored in systems that are protected with high technical protection measures, and access is limited with user control and identification.

 11. RIGHTS OF THE REGISTERED DATA SUBJECT

Woolman is in compliance with Data Subjects rights when in regard of Live video shopping app integration as follows:

Right of access and rectification

Data Subject has the right to ask for rectification of inaccurate information. This should be performed in writing according to section 2 in this document. Data Subject has the right to obtain what information is recorded and processed about them. Requests regarding personal data should be performed according to section 2 in this document. The reply to the request will be delivered when the authenticity of the person is confirmed.

Right to prohibit processing

The Data Subject has the right to prohibit the Data Controller processing their information for the purposes of direct marketing and sales by informing the Data Controller according to section 2 in this document.

Right to erasure

The Data Subject has the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay. Requests regarding personal data should be performed according to section 2 in this document.

Right to be forgotten

Data Subject has the right to be forgotten. Then all personal information of the Data Subject will be erased from Woolman's The Live video shopping app integration immediately and indefinitely unless there is legitimate ground for maintaining them. If a Data Subject wishes to apply their right to be forgotten, requests should be performed according to section 2 in this document.

Right to data portability 

The Data Subject has the right to receive their personal data in a structured, commonly used and machine-readable format. The following applies only to data the Data Subject has provided.  Requests regarding personal data should be performed according to section 2 in this document. The reply to the request will be delivered when the authenticity of the person is confirmed.

Right to restriction of processing

The data subject has the right to obtain from the controller restriction of processing. This would apply to a situation where Data Subject is waiting for Woolman’s reply to requests of rectification or erasure. Request should be performed according to section 2 in this document. 

Right to lodge a complaint

Data Subject has the right to lodge a complaint with the competent supervisory authority about the way Data Controller processes their personal data. Complaint is lodged with the supervisory authority, who in Finland is The Office of the Data Protection Ombudsman (https://tietosuoja.fi/en/home)

 12. CHANGES TO OUR PRIVACY POLICY

Woolman is developing continuously and reserves the right to make changes or updates to this Privacy Policy at any time. Changes may also be made on grounds of changing legislation. All changes are effective immediately upon posting. Woolman Inc. encourages Data Subject to periodically review this page for the latest information on our privacy policies.