Nordic Wireless Solutions AS (“CoastKey”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and protect personal data when you visit coastkey.eu, place an order, or otherwise interact with us, and it describes your rights under the EU General Data Protection Regulation (GDPR).
This policy applies to visitors and customers in the European Union and the European Economic Area. It does not cover our separate coastkey.no (Norway) or coastkey.com (United States) websites, which have their own privacy notices.
1. Who is responsible for your data
The data controller responsible for your personal data is:
| Company | Nordic Wireless Solutions AS |
|---|---|
| Company reg. no. | 987 123 192 |
| Address | Tollbodgaten 1, 4836 Arendal, Norway |
| post@coastkey.no |
Note: Norway is part of the European Economic Area, and the GDPR applies to our processing of your data. For questions about this policy or your personal data, contact us at post@coastkey.no.
2. What personal data we collect
Depending on how you use our website, we may collect the following categories of personal data:
- Identity and contact data — name, email address, postal/shipping address, telephone number.
- Order and transaction data — products purchased, order history, delivery details, and billing information. Payment card details are processed directly by our payment provider and are not stored by us.
- Account data — username and password if you create an account, and your saved preferences.
- Communication data — messages, enquiries and support requests you send us, and your newsletter/marketing preferences.
- Technical and usage data — IP address, browser type, device information, and how you interact with our site, collected through cookies and similar technologies (see Section 7).
You can browse most of our website without providing personal data. Where a field is marked as required, not providing the data may mean we cannot process your order or respond to your request.
3. How and why we use your data
We only process your personal data where we have a valid legal basis under the GDPR. The table below sets out our purposes and the corresponding legal basis (Article 6 GDPR).
| Purpose | Legal basis |
|---|---|
| Processing and delivering your orders, managing returns and warranty | Performance of a contract (Art. 6(1)(b)) |
| Creating and managing your account | Performance of a contract (Art. 6(1)(b)) |
| Responding to enquiries and providing customer support | Legitimate interests (Art. 6(1)(f)) or contract |
| Sending newsletters and marketing about our products | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Analytics and improving our website | Consent for non-essential cookies (Art. 6(1)(a)) |
| Complying with legal, accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Preventing fraud and securing our website | Legitimate interests (Art. 6(1)(f)) |
We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing, including profiling.
4. Who we share your data with
We do not sell your personal data. We share it only where necessary to run our business, with the following categories of recipients:
- Payment provider — our payment provider Stripe processes your payment. They receive the payment and transaction details needed to complete your purchase; we do not store your full card details.
- Shipping partner — DHL receives your name, address and contact details in order to deliver your order.
- Website hosting — our website runs on WordPress with the WooCommerce shop platform, hosted by our hosting provider Hostinger, which stores site and order data on our behalf.
- Communication and email tools — we use an email and communication service provider to handle customer correspondence and, where you have opted in, to send you newsletters.
- Authorities and advisers — we may disclose data where required to comply with the law, enforce our terms, or protect our rights.
Where a provider processes personal data on our behalf, we put a data processing agreement in place requiring them to protect your data and use it only on our instructions.
5. International data transfers
We aim to keep your personal data within the European Economic Area (EEA). Some of the providers we use may, however, process data outside the EEA. Where that happens, we ensure an adequate level of protection through a safeguard permitted by the GDPR — such as an EU adequacy decision or the European Commission’s Standard Contractual Clauses. You can request more information about the safeguards in place by contacting us at post@coastkey.no.
6. How long we keep your data
We keep your personal data only for as long as necessary for the purposes described in this policy:
- Order and transaction records — retained for as long as required by applicable accounting and tax law (generally at least 5 years).
- Account data — retained while your account is active; deleted on request or after a prolonged period of inactivity.
- Marketing data — retained until you withdraw consent or unsubscribe.
- Support correspondence — retained for as long as needed to handle your request and for a reasonable period afterwards.
When we no longer need your data, we securely delete or anonymise it.
7. Cookies and similar technologies
We use cookies and similar technologies to make our website work, remember your preferences, and — with your consent — to analyse traffic and improve your experience. A cookie is a small text file stored on your device when you visit a website.
We use two main types of cookies:
- Strictly necessary cookies — required for the website and shopping basket to function. These do not require consent.
- Optional cookies — such as analytics and marketing cookies, which we only set after you have given consent through our cookie banner.
You can accept or reject non-essential cookies at any time through our cookie settings, and you can also control cookies through your browser settings. Blocking some cookies may affect how the website works.
8. Your rights under the GDPR
You have the following rights in relation to your personal data:
- Access — to obtain confirmation of, and a copy of, the personal data we hold about you.
- Rectification — to have inaccurate or incomplete data corrected.
- Erasure — to have your data deleted in certain circumstances (“right to be forgotten”).
- Restriction — to limit how we process your data in certain circumstances.
- Data portability — to receive your data in a structured, commonly used, machine-readable format.
- Objection — to object to processing based on our legitimate interests, and to object to direct marketing at any time.
- Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at post@coastkey.no. We will respond within one month. Exercising your rights is free of charge in most cases.
9. How to lodge a complaint
If you believe we have not handled your personal data in accordance with the law, we encourage you to contact us first so we can address your concern. You also have the right to lodge a complaint with a supervisory authority — in particular in the EU or EEA country where you live, work, or where the alleged infringement took place.
10. How we protect your data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encrypted (SSL/TLS) transmission of data, access controls, and limiting access to personnel who need it. While no online transmission is completely secure, we work to protect your data and review our measures regularly.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version on this page and update the “Last updated” date above. We encourage you to review this page periodically.
12. Contact us
If you have any questions, comments or requests regarding this Privacy Policy or your personal data, please contact:
Nordic Wireless Solutions AS
post@coastkey.no
