Privacy policy

Updated: January 7, 2025

This privacy policy describes how Old School Boxing Gym ry (hereinafter “online store”, “we”, “our”) processes the personal data of its customers. We are committed to protecting the privacy of our customers and comply with applicable data protection legislation, such as the EU General Data Protection Regulation (GDPR).

1. Data Controller

2. Personal Data Processed

We process the following personal data:

• Name
• Contact information (address, phone number, email address)
• Payment information (payment method, payment transaction details, but not card details)
• Order information (products ordered, delivery information)
• Information related to the customer account (username, password)
• Possible customer feedback and contacts

3. Purpose and Basis for Processing Personal Data

The purpose of processing personal data is to:

• Process orders, deliveries, and customer service
• Handle invoicing and payments
• Maintain customer relationships and marketing (based on consent)
• Comply with legislation (e.g., accounting regulations)

The legal bases for processing are:

• Performance of a contract (e.g., delivery of orders)
• Legal obligation (e.g., accounting)
• Legitimate interest (e.g., maintaining customer relationships)
• Consent (e.g., marketing communications)

4. Retention Period of Personal Data

We retain personal data only for as long as it is necessary to fulfill the purposes of processing or to comply with legal obligations. For example, according to accounting regulations, order information is stored for at least 6 years.

5. Recipients of Personal Data

We may disclose personal data to the following parties:

• Payment intermediaries and banks
• Logistics partners (e.g., transport services)
• Accounting and auditing services
• Authorities to comply with legal obligations

Appropriate data processing agreements have been made with all parties processing personal data.

6. Transfer of Data Outside the EU/EEA

As a rule, personal data is not transferred outside the EU/EEA. However, if this occurs, we ensure adequate data protection through, for example, standard contractual clauses approved by the European Commission.

7. Rights of the Data Subject

The data subject has the following rights:

• Right of access: The customer can request to view their data.
• Right to rectification: Incorrect data can be corrected.
• Right to erasure: The customer can request the deletion of their data with certain restrictions.
• Right to restriction of processing: The customer can request the restriction of processing.
• Right to object to processing: The customer can object to the processing of their data if the processing is based on legitimate interest.
• Right to data portability: The customer has the right to receive their data in a structured, machine-readable format.

All rights can be exercised by contacting the contact information mentioned in section 1.

8. Cookies

We only use necessary cookies that ensure our store functions as it should. We do not track your online activities. Users can control the use of cookies through their browser settings.

Read more about the use of cookies on our website.

9. Changes to the Privacy Policy

We reserve the right to update this privacy policy. Changes will be announced on the online store's website.

10. Contacting Us Regarding Privacy Matters

If you have any questions about this privacy policy or the processing of your personal data, you can contact: