PRIVACY POLICY

PRIVACY POLICY

The GT Popcorn Group is committed to your right to privacy. This Privacy Notice explains how we process information about you ("personal data") as an individual accessing our website or purchasing GT Popcorn products (both online and physical purchases in retail stores).

Please read this information carefully.

The controller of your personal data is GT Popcorn for processing personal data on the website. For processing of personal data in connection with your order and purchase of products, the controller is the local Helly Hansen entity with which the order/purchase is made, as specified in our Terms and conditions.

We will only use your personal data as set out in this Privacy Notice.

PERSONAL DATA WE COLLECT ABOUT YOU

We process information about you that you have provided to us, information that originates from your activities on the website and information collected from other sources. The categories of personal data that we process are generally as follows:

Information that may be provided by you: 

  • Contact Data such as name, gender, shipping address, email address, and phone number.
  • Data regarding your order such as product details.
  • Payment Data such as bank details, credit card number, and billing address.
  • Marketing Data such as marketing preferences, or survey responses.
  • Request and Claim Data such as details about returns or exchanges.
  • Emails or contact forms such as electronic communication that you have sent us.
  • Product reviews such as the personal data you may share while providing a product review.

 

Information that may be collected about you:

  • Technical Data such as device type, web browser, IP address, accessibility options.
  • Usage Data such as account log ins, site navigation, clicks and browsing time.
  • Location Data when using the website.
  • Preference Data such as products and activities you have indicated an interest in, preferred language.
  • Social Media Data / Third Party Data such as your social media handle and comments.

HOW WE PROCESS YOUR PERSONAL DATA

Data Processed: Contact, Order and Payment Data

To manage your payment, we use trustworthy third parties that ensure a secure and easy payment. They collect your Payment Data according to their Privacy Notices.

 

Legal Basis for Processing: Performance of our contract & compliance with legal obligation

  • To ptovide customer care, share your product reviews and potential claims. 

          

Data Processed: Contact, Order& Request or claim Data, Emails or contact forms, Product review

 

Legal Basis for Processing: Performance of our contract, compliance with legal obligation, legitimate interest to improve quality of service

 

  • For analytics ( market customer and product analysis
  • For Marketing purposes

          

On a case-by-case basis, we may also use your personal data for subsequent purposes that are compatible with the purpose that the data originally was collected for such as knowledge management, handling of potential claims and proceedings and handling of requests from supervisory authorities.

 

If you fail to provide personal data when required:

  • to offer you some of the services available on the website, you will not be able to access all the available services;
  • to enter into a contract, we will not be able to conclude the respective contract with you;
  • by a statutory or contractual requirement, you will be liable as mentioned in the statute/contract.

 

 

COOKIES

We use cookies and similar technologies on our site. For more information, please find our cookie policy here.

HOW WE SHARE YOUR PERSONAL DATA

Helly Hansen is a global company and within our business we may disclose your data to different legal entities both within our Group and third parties.

 

  • We may share your personal data with other companies in Helly Hansen Group within the scope of this Privacy Notice.
  • We may share your personal data with our owners the Canadian Tire Corporation, Limited (CTC) within the scope of this Privacy Notice.
  • We may also share personal data where required by law. This may include disclosing personal data to public authorities, such as tax authorities, or disclosing personal data in connection with legal proceedings.

 

Plugged In third parties and social media

Our websites may contain links to third-party online websites/apps. Such third parties have their own policies and notices that govern their collection, use, and disclosure of information. We suggest that you read their privacy notices to learn about their practices.

 

Social media provides tools and links that we may include on our websites. If you chose to use such tools or links, the social media may collect information from your visit on our site. We also have pages on social media, where we provide information about our products and interact with the users. On such social media pages, we may receive anonymised insight, such as statistics about age, gender, and location of our users. We will also receive information that you decide to share with us, such as chat, comments and likes.

 

Your experience on the social media sites will be governed by the privacy and other policies and notices of those sites. The privacy settings you have chosen on those websites will determine the degree to which your information is made public. We encourage you to choose your privacy settings on those websites accordingly. As we are joint controllers with the social media for data processed from your use of social media tools or links on our site, and for aggregated insight that we get from your use of our pages on social media, you may also contact us if you would like to have more information, or if you want to exercise your privacy rights. However, please note that we may not be able to respond to all request, and that we may have to refer you to the social media for further information.

 

As the recipients mentioned above may be established anywhere in the world, the personal data may be transferred globally. If data originating from the EEA is transferred to countries outside the EEA, we will adopt appropriate safeguards to protect the privacy by means of agreements (Standard Contractual Clauses), supplementary measures for international transfers or by transferring it to a country that offers an adequate level of protection. You may receive a copy of the relevant parts of the agreements by contacting us.

HOW LONG WE STORE YOUR PERSONAL DATA

We will retain your personal data for as long as necessary for the purposes for which we collect them. The precise period will depend on the purpose for which we hold your information, and these are the criteria that we use to determine when we will delete your data:

 

  • We retain data to the extent required by law (such as tax/bookkeeping laws);
  • We retain data such as contact data, order data, payment data, request and claim, and communication data to the extent relevant for limitation periods for potential claims (typically two to five years after date of a purchase);
  • We retain data such as contact data, order data, marketing data, location data and preference data as long as you have consented to receive marketing communication from us;
  • We retain product review data as long as a product is available on our website or if you request to delete your review before that; · We retain data collected through cookies as mentioned in our cookie policy.
  • We endeavour to delete other data two years after your last interaction with us (such as last purchase or last communication) or directly after you have deleted your profile on our website, however we keep the invoices data as per statutory requirements.

YOUR PRIVACY RIGHTS

Within the conditions/limitations set out in applicable law, you have the following privacy rights:

  • Right to information. You have the right to obtain further information on our use of your personal data.
  • Right of access. You have the right to receive a copy of your personal data.
  • Right to rectification. You have the right to ask us to correct your personal data if it is incorrect or incomplete, such as by changing your details on your account.
  • Right to be forgotten (deletion). You have the right to request the erasure of your data if we do no longer need them.
  • Right to restrict processing of personal data. You have the right to request that we suspend our processing of your personal data.
  • Right to data portability. You have the right to obtain personal data that you have provided to us in a format that enables you to transfer that personal data to another organization. You may also have the right to have your personal data transferred directly from us to such organization.
  • Right to object to processing of personal data. You have the right to ask us to stop particular processing of your personal data.
  • Right to prevent automated decision making. You have the right not to be subject to automated decision making (such as automated credit scoring).
  • Right to withdraw consent. If you have given your consent to our processing of personal data, you are free to withdraw the consent at any time.
  • Other rights. You may also be entitled to additional rights and remedies provided by your local applicable law.

 

Please contact us if you would like to exercise your rights by reaching out to gtpopcorn8@gmail.com

 

Please note that these rights are subject to conditions and limitations by law. If you find that we use your personal data in violation of applicable law, you may file a complaint with the relevant data protection authority. We encourage you to contact us prior to making such complaint, so that we may consider your objections and clarify any misunderstandings. You may also designate an authorized agent to make a request on your behalf, which, for your protection, we will also need to verify as authentic.

 

Verification Process and Required Information. We may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your email address, full name, billing address (with zip code) and phone number, and for access requests may require (if you have made a purchase with us) that you identify some items ordered.

CHILDREN

The services provided by GT Popcorn Group are not intended for the use of individuals under the age of 16, and we do not knowingly collect information online from individuals under the age of 16 without prior guardian consent.

CHANGES TO THIS PRIVACY NOTICE

If we make any changes to this Privacy Notice that will affect your privacy, we will notify you by appropriate means, such as by email or by publishing updates on our website. You will always find the latest version of this Privacy Notice on our website.

CONTACT INFORMATION

If you have any questions, comments, or requests you can contact us at gtpocorn8@gmail.com.

Version 1.0

Last updated on 13 November 2023