Data Privacy Information - Nordic Circle Challenge
Data protection information Nordic Circle Challenge October
Privacy information
Nordic Circle Member Get Member Challenge October 2025
Protecting your personal data is very important to us. Below you will find information about the processing of your personal data in connection with this challenge.
We process your personal data, namely your first name, last name, date of birth, address (street, postal code, city), and email address, solely for the purpose of conducting and administering the challenge. This processing is based on your consent (Art. 6 (1) lit. a GDPR), and, with regard to prize delivery, on our contractual obligation arising from the challenge (Art. 6 (1) lit. b GDPR). You grant us your consent by participating in the challenge and actively making your first recommendation to another person.
Providing your consent to the processing of your personal data is voluntary. Not providing this data will have no adverse or other consequences for you, other than preventing you from participating in the challenge; in particular, there are no legal or contractual obligations to give this consent.
Your personal data will be stored by us until the end of the challenge, but for a maximum of twelve months thereafter. If you are a prize winner, your personal data will be stored and processed in accordance with statutory retention periods. You can withdraw your consent to participate in the challenge at any time with effect for the future by sending an email to konsumentenservice@jti.com. Withdrawing your consent does not affect the lawfulness of the processing carried out before the withdrawal.
Our challenge is managed via our website nordicspirit.at. For this purpose, we use technically necessary cookies (Art. 6 (1) lit. f GDPR). The use of necessary cookies does not require your consent. However, you can deactivate them at any time via your browser settings. Any further use of cookies (e.g., for marketing purposes) only takes place with your consent (Art. 6 (12) lit. a GDPR). You can manage and revoke this consent via our consent management (also known as the "cookie banner" or "cookie settings") on our website nordicspirit.at.
To achieve the stated purpose, it may be necessary for us to disclose your data to the following recipients:
• Agencies headquartered in Austria (or within the EU/EEA):
Solution25 GmbH, Germany, 28203 Bremen, Feldstraße 111
• Shopify Inc., 126 York Street, Suite 200, Ottawa, Canada, K1N 5T5
• iDenfy, Barsauko g. 59, LT51423 Kaunas, Lithuania
• Cooperation partners for the challenge processing, such as suppliers, manufacturers, retailers or delivery services for the prizes of the competition.
Your rights
You have the following rights in connection with the processing of your personal data:
- Right of access (Art. 15 GDPR): You have the right to request confirmation from us as to whether your personal data is being processed. Furthermore, you have the right to request further information about the specific purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of the personal data, the storage period, the existence of a right to erasure or rectification of your personal data or to restriction of processing and the right to object, the existence of a right to lodge a complaint, as well as all available information about the origin of your data.
- Right to rectification (Article 16 GDPR): You have the right to request that we rectify your personal data without undue delay. This right includes the rectification of inaccurate data and the completion of incomplete personal data.
- Right to erasure (Art. 17 GDPR): You have the right to request that we erase your personal data without undue delay, provided that the grounds set out in Art. 17 para. 1 lit. a to f GDPR (e.g. the purpose for processing no longer exists) are met and the processing of your personal data is not necessary.
- Right to restriction of processing (Art. 18 GDPR): Under the cases mentioned in Art. 18 GDPR (e.g. inaccuracy of the processed personal data, unlawfulness of the processing, etc.), you also have the right to request from us the restriction of processing.
- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used format and to request that we transmit this data to another controller.
- Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data processed within the scope of this website.
Withdrawal of consent declarations (Art. 7 GDPR): You have the option to withdraw any consent you have given us at any time.
Right to lodge a complaint : You can also lodge a complaint at any time with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Telephone: +43 1 521 52-0,
Email: dsb@dsb.gv.at You can assert your data subject rights – with the exception of the right to lodge a complaint with the Austrian Data Protection Authority – against us at the following address.
Our contact details:
JTI Austria GmbH
Erdberger Lände 26a/71
1030 Vienna, Austria
Telephone: +43 1 313 42 – 0
Email: consumerservice@jti.com
As of October 2025