GDPR Policy
This GDPR Policy explains how personal data is handled for users within the European Economic Area (EEA) in accordance with the General Data Protection Regulation (GDPR). It complements the website’s Privacy Policy by outlining user rights, legal bases for processing, and data handling practices for woodnestle.
1. Data Controller Information
woodnestle acts as the data controller for personal information collected via the website and services. Users may contact us regarding data privacy matters using the contact details below.
2. Personal Data Collected
We may collect personal information including:
-
Full name, email address, phone number
-
Payment and order details
-
Delivery addresses
-
Activity on the website through cookies or analytics tools
This information is collected solely for purposes such as processing orders, assisting with support requests, and sending communications if consent is provided.
3. Legal Basis for Data Processing
In line with GDPR, personal data may be processed under the following legal grounds:
-
Performance of a contract – necessary for fulfilling orders and providing purchased products or services.
-
Explicit consent – for newsletters, promotional communications, and marketing activities.
-
Compliance with legal obligations – for tax, accounting, or regulatory purposes.
-
Legitimate interests – to enhance the user experience, prevent fraud, and analyze website usage, balanced against user rights.
4. User Rights under GDPR
Users in the EEA have the following rights regarding their personal data:
-
Access and review: request a copy of their personal data.
-
Correction: update or correct inaccurate information.
-
Deletion: request removal of personal data where legally allowed.
-
Restriction of processing: limit certain data processing activities.
-
Data portability: receive personal data in a structured, commonly used format.
-
Withdraw consent: revoke consent for specific processing purposes.
-
Lodge a complaint: contact a relevant data protection authority.
Requests to exercise these rights can be sent via the contact details below.
5. Data Sharing and Transfers
Personal data may be shared with:
-
Payment processors to complete transactions
-
Shipping carriers for delivery purposes
-
Legal or regulatory bodies when required by law
Cross-border transfers outside the EEA are performed under GDPR safeguards, such as standard contractual clauses.
6. Data Retention
Data is kept only as long as needed to provide services, comply with obligations, or resolve disputes. Once no longer necessary, personal information is securely deleted or anonymized.
7. Data Security Measures
Technical and organizational measures are implemented to prevent unauthorized access, alteration, or disclosure of personal data. These include secure storage, restricted access, and encryption where applicable.
8. Contact Information
For any inquiries or requests regarding GDPR compliance for woodnestle:
Address: 134 Estates St, Livermore, CA 94550-3302, US
Phone: +1 (747) 345-8057
Email: globalhelp@woodnestle.com
Business Hours (Australian Time):Monday to Saturday 08:00 – 11:30-14:00 – 17:30