Data Controller

Art Of Ground Games Oy ("we")
Business ID: 3113108-9
Vanha Jorvaksentie 3, 02320 Espoo
Tel. +358 41 329 6514

For questions regarding data protection and the processing of personal data, please contact Art Of Ground Games' data protection contact person by email: info@artofgroundgames.com

1. General
This is a privacy policy in accordance with the EU General Data Protection Regulation (GDPR, 2016/679), informing users of the Art Of Ground Games online store about the processing of their personal data.

We are committed to protecting our customers' privacy and following good data protection practices in all our operations. This privacy policy describes what personal data we may collect when you order our products or contact us through our website, and for what purposes we may use such data.

2. What personal data do we process?
We process the following personal data that you have provided yourself:

• First and last name
• Email address
• Phone number
• Delivery information
• Payment / billing information
• Information on any marketing permissions and restrictions
• Product reviews

Certain data is mandatory for processing your order (name, delivery address, payment details). Without this information we cannot process or deliver your order.

We also process the following data observed from or derived through analytics related to your use of the service:

• Purchase history, including ordered products and their prices
• Device identifiers (IP addresses)
• Online store usage and browsing data
• Data collected through cookies (e.g. how the customer arrived at the online store)

3. Where do we collect your personal data from?
We collect personal data directly from you, for example when you create an account, place an order, contact customer service, or subscribe to our newsletter. Personal data may also be collected through separate forms on our website, at events and campaigns, and by phone during customer service calls.

4. Who do we share your personal data with?
We share your personal data with third parties, for example in payment transactions, deliveries, and certain marketing purposes in order to provide our service. Such third parties include:

• Carriers such as Posti and Matkahuolto
• Payment processors for card payments
• Credit intermediaries for invoice or instalment payments

We also share your personal data with our service providers, such as our email marketing and online store partners. These third parties may not under any circumstances use the provided data for their own purposes, and only information necessary for the provision of the service is shared with them. We ensure that external service providers processing your personal data are committed to complying with data processing agreements in accordance with GDPR. We do not sell your data to third parties.

We also have the right and/or obligation to disclose personal data to authorities in order to fulfil requests received from them.

5. Do we transfer your personal data outside the EU or EEA?
When we use service providers that are necessary for the provision of our services, your personal data may in certain cases be transferred outside the EU/EEA. In such cases, the transfer is carried out using appropriate transfer mechanisms, such as the European Commission's standard contractual clauses.

6. How do we protect your personal data?
The databases in which personal data is stored are protected against external data breaches by firewalls, passwords, and other technical measures. The databases and their backups are located in locked premises. Only identified individuals and employees of companies acting on our behalf have access to the data contained in the register, through personal access rights granted by us.

If your personal data were to be exposed to a security breach that is likely to pose a risk to your rights and freedoms, we will notify you without undue delay.

7. What rights do you have?

Right of access: You have the right to know what personal data has been collected about you and, upon request, to receive a copy of this data.

Right to rectification: You have the right to request that we correct or delete personal data that is inaccurate, incomplete, or otherwise imprecise.

Right to erasure and restriction of processing: You may request that we delete personal data held about you or restrict the processing of your personal data, for example when there is no lawful basis for processing such data or when the data is no longer needed, unless we have a legal obligation to retain and process such data (for example, the right to prohibit marketing).

If you have comments, questions, or requests relating to this privacy policy or the processing of your personal data, or if you wish to exercise the rights mentioned above, you may contact Art Of Ground Games Oy in writing at info@artofgroundgames.com. We will respond to your requests without undue delay and in any case within one month of receiving the request.

Exercising your rights is free of charge. We may charge a reasonable fee for manifestly unfounded or excessive requests, in particular for repetitive requests.

Please also note that in certain cases the exercise of data subject rights may be restricted by regulatory requirements or legislation, such as requirements for the retention of accounting records.

9. How long do we retain your personal data?
We retain your personal data only for as long as is necessary to fulfil the purposes described in this privacy policy or to meet our statutory obligations. We may retain your personal data for longer if it is necessary to fulfil legal requirements, manage litigation, resolve disputes, comply with regulatory requirements, or protect our legitimate interests. In such cases, data is retained only for as long as that need exists.

Finnish accounting legislation sets obligations for the longer-term storage of data. Information related to your orders (such as accounting records and billing data for the financial period) is retained for six years from the end of the financial period, and data related to payment transactions is retained for six years from the transaction, in accordance with accounting legislation.

10. How do we use cookies?
A cookie is a small text file that a browser stores on the user's device. Cookies contain a unique identifier that can be used to recognise users. Our online service uses cookies in order to provide our service in the most user-friendly and high-quality manner possible, and to further develop it. Users cannot be identified by cookies alone.

There are two types of cookies: persistent and temporary (session cookies). Persistent cookies are stored as a file on your computer or mobile device, but never for more than 12 months. Session cookies are stored temporarily and disappear when you end your browsing session.

When you visit our website for the first time, you will see a cookie banner through which you can accept or decline non-essential cookies. You can withdraw your consent or modify your cookie settings at any time through the cookie settings on our website. Please note that if you disable cookies, you may not be able to take full advantage of all the features of the website.

11. Changes to the privacy policy
Due to the development of our services and changes in legislation, we reserve the right to update this privacy policy. We will notify you of any significant changes when the terms are updated.

Updated 27.5.2026