Privacy Notice
This privacy notice describes how Yugen Collectables AS processes personal data when you visit Yugen.no, shop with us, or contact us.
1. Who is responsible for the personal data?
Yugen Collectables AS is the data controller for the personal data processed in connection with the operation of Yugen.no.
Organization number: 838683932
Address: Bjørnsons Gate 3, 2821, Gjøvik
Email: post@yugen.no
Telephone: +47 94474537
You can contact us if you have questions about privacy or wish to exercise your rights.
2. What information do we process?
Depending on how you use the online store, we process the following information:
Contact details: Name, email address, telephone number, billing address, and delivery address.
Order details: The products you order, order number, amount, payment status, delivery information, and history related to returns or complaints.
Customer inquiries: Information you send us through the contact form, email, or other contact channels.
Account details: If you create a customer account, we process the information associated with the account.
Technical information: Including IP address, browser, device information, and logs necessary for operation and security.
Consents and choices: For example, cookie settings and consent to newsletters.
The information mainly comes from you. We also receive necessary information from Shopify, payment providers, and shipping providers, including information about payment and delivery.
3. Why do we use the information?
Order, payment, and delivery
We use contact details and order details to complete the purchase, process the payment, ship the goods, and follow up on the order.
The legal basis for processing is that the information is necessary to fulfill the agreement with you, cf. Article 6(1)(b) of the GDPR.
Information necessary for the purchase must be provided so that we can process and deliver the order.
Customer service, returns, and complaints
We use relevant information to answer questions and process returns, right of withdrawal, and complaints.
The legal basis for processing is the fulfillment of the agreement and legal obligations, cf. Article 6(1)(b) and (c). For general inquiries, processing is based on our legitimate interest in answering inquiries and providing customer service, cf. point (f).
Accounting and statutory obligations
We process and store information necessary for bookkeeping, accounting, and other statutory obligations.
The legal basis for processing is legal obligation, cf. Article 6(1)(c).
Operation, security, and prevention of misuse
We use necessary technical information to secure the online store, handle errors, and prevent fraud and misuse.
The legal basis for processing is our legitimate interest in protecting the online store and our customers, cf. Article 6(1)(f).
Newsletters and marketing
If you subscribe to our newsletter, we use your contact details to send information about products, news, and offers.
The legal basis for processing is consent, cf. Article 6(1)(a). You can withdraw your consent at any time through the unsubscribe link in the messages or by contacting us.
[Keep this paragraph only if you offer a newsletter. State any other marketing and the legal basis for it.]
4. Who do we share information with?
We share relevant personal data with providers who help us operate the online store and process orders:
Providers that process information on our behalf must have a data processing agreement with us. Some providers, including payment providers, may be independent data controllers for parts of the processing. Their privacy notices describe this in more detail.
We may also share information with public authorities when we are legally required to do so.
5. Shopify
Yugen.no uses Shopify to operate the online store. Shopify processes personal data, among other things, to provide the platform, manage orders, and maintain security.
Shopify's role depends on the service and features used. For certain services, Shopify processes information as an independent data controller.
You can find more information in Shopify's privacy notice for consumers.
6. Processing outside the EEA
The use of Shopify and other providers may involve personal data being processed outside the EEA.
When personal data is transferred to such countries, the transfer must have a valid transfer basis. This can be a decision by the European Commission on an adequate level of protection or the EU's standard contractual clauses with necessary additional measures.
[State the relevant countries, providers, and transfer basis based on the services and agreements you actually use.]
Contact us if you would like more information about the transfers and protection measures, or a copy of the relevant guarantees.
7. Cookies and similar technology
The online store uses cookies and similar technology for features such as the shopping cart, payment, and security.
Technology that is strictly necessary to deliver a service you have expressly requested can be used without consent. Other cookies, for example for analytics or marketing, are only used after you have consented.
You can reject optional cookies and later change or withdraw your consent through [Link or button to cookie settings].
You can find information about the purposes, providers, and storage duration in [Link to cookie overview].
8. How long do we store the information?
We do not store personal data longer than necessary for the purpose, unless the law requires further retention.
Information necessary for an ongoing dispute or legal claim may be retained until the matter is resolved.
9. Your rights
Under the privacy regulations, when the conditions are met, you can:
Request access to the personal data we process about you.
Request that inaccurate or incomplete information be corrected.
Request deletion of information.
Request restriction of processing.
Object to processing based on legitimate interest.
Receive information you have provided to us in a structured, commonly used, and machine-readable format, and request that it be transferred to another organization.
Withdraw consent without affecting the lawfulness of the processing before the consent was withdrawn.
You can always object to the use of personal data for direct marketing.
Send requests to [Contact address]. We will respond without undue delay and normally within one month at the latest. If we need more time under the rules, we will inform you of this.
We may request necessary information to confirm your identity before providing access or implementing changes.
10. Complaint to the Norwegian Data Protection Authority
If you believe that we process personal data in violation of the regulations, you can complain to the Norwegian Data Protection Authority.
You can find information about rights and the right to complain at www.datatilsynet.no.
You are also welcome to contact us first, so that we can try to resolve the matter.
11. Changes
We update the privacy notice if our services or the processing of personal data change. The current version is published on this page with the date of the last update.
In the event of significant changes, we provide additional information when required by the regulations.