Direct marketing and personal data processing
The online store uses the personal data entered by the buyer (including name, phone number, address, email address, bank details) only to process the order and send the goods to the buyer.
The online store delivers personal information to Itella Estonia OÜ.
The online store will send newsletters and offers to the buyer to the email address of the buyer, only if the buyer expressed a desire to enter an email address on the website and notified them that they would like to receive email notifications. Buyer may at any time withdraw the proposals and newsletters sent by e-mail, notifying email firstname.lastname@example.org or by following the instructions in the email containing the proposal.
The data of purchase history (date of purchase, product, quantity, information about the buyer) is used to compile an overview of the purchased goods and services and analyze customer preferences.
Bank account number is used to return payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed to address issues related to the delivery of goods and services (customer support).
The IP address of the online store user or other network identifiers are treated as an online store for the provision of information services and for the creation of network usage statistics.
The processing of personal data takes place in order to fulfill the contract with the client.
The processing of personal data takes place in order to fulfill a legal obligation (for example, accounting and settlement of consumer disputes).
Recipients to whom personal information is transmitted
Personal data is transferred to the online store support service for managing purchases and purchase history, as well as for solving customer problems.
Wordworks OÜ is the main processor of personal data.
WORDWORKS STUDIO OÜ transfers the personal data required for making payments to the Maksekeskus AS payment processor, registration number 12268475, address Niine 11, Tallinn, 10414. Maksaekeskus AS receives the following customer data: transaction number, order name, transaction status, transaction date, amount , customer name and payment method used.
For delivery by Itella Estonia OÜ, registration code 10891224, address Loomäe tee 13, Lehmja küla, Rae vald, 75306 Harjumaa, Itella Estonia OÜ recieves the client’s name, phone number, postal address, email address, amount paid, weight of the goods, payment receipt number are transmitted.
Security and data access
Personal data must be stored on servers located in the territory of a member state of the European Union or countries associated with the European Union. The data can be transferred to countries whose data protection level was assessed by the European Commission as sufficient, and for US companies that have joined the Privacy Shield structure.
Only employees of an online store can have access to personal data and only to solve technical problems associated with the use of an online store and provide customer support.
The online store has implemented appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.
The transfer of personal data to authorized processors of an online store (for example, a transport service provider and data hosting) is carried out on the basis of contracts concluded with an online store and authorized processors. Authorized processors are required to provide appropriate security measures for the processing of personal data.
Withdrawal of consent
If the processing of personal data is carried out with the consent of the client, the client has the right to withdraw the consent, notifying customer support by e-mail.
Storage of data
Personal data will be deleted when you close your online store's customer account, and are stored in accounting for accounting or for resolving disputes with consumers.
If the online store was purchased without a customer account, the purchase history will be maintained for three years.
In case of disputes related to payments and consumer disputes, personal data is kept until the claim is satisfied or until the expiration of the limitation period.
Personal data required for accounting purposes is stored for seven years.
You must contact customer support by e-mail to remove personal information. The removal request must be answered no later than one month, and the removal period must be indicated.
An application for the transfer of personal data by e-mail must be answered within one month. The support service identifies the person and reports personal data to be transferred.