1. Data Controller
The entity responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is FISH:HELM (Sweden). Contact: support@fishhelm.com.
2. Personal Data Collected & Purpose
We collect and process personal data necessary for contract execution, shipping, and store operation, including:
- Name, shipping/billing address, email address, and phone number.
- Payment details (processed securely via PCI-compliant payment gateways like Stripe; we do not store full credit card numbers).
- Technical log data (IP address, browser type, device information via essential session cookies).
3. Legal Basis for Processing (Art. 6 GDPR)
- Art. 6(1)(b) GDPR: Processing necessary for contract fulfillment and order delivery.
- Art. 6(1)(c) GDPR: Compliance with legal and tax accounting obligations.
- Art. 6(1)(f) GDPR: Legitimate business interest in keeping our checkout and website secure.
4. Data Sharing with Third Parties
Your data is shared strictly on a need-to-know basis with trusted service providers to fulfill your order:
- Logistics Partners: UPS and DHL to deliver your physical shipment.
- Payment Processors: Stripe / Wise to process transaction payments.
- Hosting & Infrastructure: Technical infrastructure providers running our WooCommerce platform.
5. Your Rights Under the GDPR
As an EU resident, you hold the following rights regarding your personal data:
- Right to access, rectify, or erase your stored personal data.
- Right to restrict processing or object to processing.
- Right to data portability.
- Right to lodge a complaint with a supervisory authority (such as the Swedish Data Protection Authority — Integritetsskyddsmyndigheten / IMY).