What personal data is processed?
− name, phone number and e-mail adress
− delivery address for the goods
− bank account number (only where a refund cannot be issued to the original payment method)
− cost of goods and services and payment-related data (purchase history)
− customer support data
For what purpose is personal data processed?
Personal data is used to manage customer orders and to deliver goods. Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of the goods and services purchased and to analyse customer preferences. The bank account number is used to refund payments to the customer. Personal data such as email address, telephone number and customer name is processed in order to resolve questions relating to the provision of goods and services (customer support).
Legal basis
Personal data is processed for the purpose of performing the contract concluded with the customer. Personal data is also processed in order to comply with a legal obligation (for example, accounting and the resolution of consumer disputes).
Recipients to whom personal data is transferred
Personal data is transferred to the online store’s customer support in order to manage purchases and purchase history and to resolve customer issues. The name, telephone number and email address are transferred to the transport service provider chosen by the customer. Where the goods are delivered by courier, the customer’s address is transferred in addition to the contact details. Personal data may be transferred to information technology service providers where this is necessary to ensure the functionality of the online store or data hosting.
Security and access to data
Personal data is accessible to employees of the online store, who may access it in order to resolve technical issues relating to the use of the online store and to provide customer support. The online store applies appropriate physical, organisational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access and disclosure. Personal data is transferred to the online store’s authorised processors (for example, the transport service provider and data hosting) on the basis of contracts concluded between the online store and those processors. Authorised processors are obliged to ensure appropriate safeguards when processing personal data.
Withdrawal of consent
Where personal data is processed on the basis of the customer’s consent, the customer has the right to withdraw that consent by notifying customer support by email.
Erasure
To have personal data erased, please contact customer support by email. A response to an erasure request will be given no later than within one month, and will specify the period for erasure of the data.
Dispute resolution
Disputes relating to the processing of personal data are resolved through customer support (CONTACT DETAILS). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).