1. Data We Collect

1.1 We may collect information you provide, such as Name, Email, Phone number, Messages sent through forms or any information you choose to share.

1.2 We may collect technical data such as: IP address, Browser and device type, Pages visited, Referring website and Time and date of access.

1.3. We may collect payment-related data in regards to: Donations/purchase amount, transaction details, name, email, or phone number. Payment details (e.g., card numbers) are never stored by us and are handled securely by: Stripe, PayPal, Swish, or your bank.

2. Purpose of Processing

2.1 We process data to: provide and operate the website, to handle purchases, donations, or contact requests, to improve website performance and security, to send confirmations or updates (only if you request them) and to comply with legal and tax obligations. We do not sell or share your data with third parties for marketing.

3. Legal Basis

3.1 We process data based on: your consent, contract (e.g., payments or requested services), legitimate interest (website functionality, security, analytics), legal obligation (accounting, fraud prevention).

4. Cookies

4.1 This website does not use cookies requiring consent.

5. Third-Party Providers

5.1 Data may be processed by trusted third parties, such as, Web hosting platforms (Cloudflare, Github), payment processors (Stripe, PayPal, Swish, banks), email or communication services. All providers comply with GDPR.

6. Data Storage

6.1 We keep personal data only as long as necessary for its purpose. Payment data - according to legal/accounting requirements. Contact messages - until your request is handled.

7. Your Rights

7.1 You can request at any time: Access to your data, Correction or deletion, Restriction or objection to processing, Data export, Withdrawal of consent.

7.2 To make a request, contact us at home@nordstrarfilm.com. We respond within 30 days.

8. Security

8.1 We protect your data using: HTTPS encryption, Secure hosting, Access controls, No local storage of sensitive payment details. However, no online system is completely risk-free.

9. International Transfers

9.1 If data is processed outside the EU/EEA, we use GDPR-approved safeguards such as Standard Contractual Clauses (SCCs).

10. Children’s Data

10.1 We do not knowingly collect data from children under 16. Such data will be deleted immediately if discovered.

11. Changes

11.1 We may update this Privacy Policy. The latest version is always posted on this page.

12. Limitation of Liability / Force Majeure

12.1 We make every effort to ensure the website is available and functions correctly. However, we do not guarantee uninterrupted service and are not liable for any loss or damage caused by events outside our reasonable control, including but not limited to natural disasters, technical failures, cyberattacks, or third-party service outages. Users use this website at their own risk.

13. Contact

13.1 For any privacy questions or GDPR requests, reach us at home@nordstarfilm.com Nordstar Film AB.