What personal data are processed

• name;
• contact information such as a telephone number and an e-mail address;
• payer’s address and delivery address;
• bank account number;
• costs of goods and services and data related to payments (purchase history);
• customer support details;
• other information related to customer surveys and/or offers.

For what purpose personal data are processed

Personal data are processed for the purposes of the performance of the contract concluded with the customer. Personal data are also processed to fulfil legal obligations (for example, accounting and the resolution of consumer disputes).

Personal data are used for managing the customer’s orders and delivering the goods.

Purchase history data (purchase date, goods, quantity, customer data) are used for preparing an overview of goods and services purchased and for analysing customer preferences.

The bank account number is used to refund payments to the customer.

Personal data such as e-mail address, telephone number and customer name are processed to resolve any issues related to the provision of goods or services (customer support).

The IP address or other online identifiers of the user of the online shop are processed for the provision of the online shop as an information society service and for compiling Internet use statistics.

Security and access to data

Personal data are stored on servers located within the EU or EEA. Data may also be transmitted to countries with adequate protection as deemed by the European Commission, or to US companies certified under the Privacy Shield framework.

The online shop implements physical, organizational and IT security measures to prevent data loss, unauthorized access, or modification.

Data may be processed by authorized processors who are contractually bound to maintain proper safeguards.

Inspection and amendment of personal data

Personal data can be reviewed or updated via the customer’s account. If a purchase was made as a guest, data inquiries can be made through a request form.

Retention

Upon account closure, personal data is deleted unless required for accounting or dispute resolution.

Guest purchase history is stored for 3 years.

In case of disputes, data is retained until resolution or the end of the 3-year limitation period.

Accounting-related data is stored for 7 years.

Direct marketing messages

Email addresses or phone numbers are used for direct marketing only with the customer’s consent. Opt-out is available via an unsubscribe link or by contacting support.

Customers may object to profiling or direct marketing at any time by notifying customer support via email.

Resolution of disputes

Disputes regarding data processing are handled by customer support. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).