The controller of personal data of the webshop nammchocolate.com is Roosiku OÜ (registration code 12836577).), Räpina mnt 10, 65606 Võru. Phone +372 58056009 and e-mail info@roosiku.ee /maybe make a separate e-mail address for the e-shop?
Roosiku OÜ transfers the personal data necessary for the execution of payments to the processor Montonio.
What personal data is processed
- name, telephone number and e-mail address
- date of birth
- delivery address
- bank account number
- the cost of goods and services and payment details (purchase history).
- customer support details
- IP address
Purposes for which personal data is processed
Personal data is used for the management of customer orders and the delivery of goods.
Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased, to analyse customer preferences and for the purpose of, among other things, resolving consumer disputes.
The date of birth is used to offer a discount to the customer on his/her birthday..
The bank account number is used to return payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support). In addition, e-mail is used to send invoices and the telephone number is used to notify the arrival of goods at the parcel machine.
The IP address or other network identifiers of the user of the online shop are processed for the purpose of providing the online shop as an information society service and for the purpose of web usage statistics.
Legal basis
The processing of personal data is carried out for the purposes of the execution of the sales contract with the customer (management of the customer’s orders, delivery, return of goods and payments).
Processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).
The processing of personal data is necessary for the legitimate interest of the controller (Roosiku OÜ), which is to collect purchase history data for the purpose of resolving potential consumer disputes.
Recipients to whom personal data are disclosed
The name, telephone number and e-mail address will be forwarded to the transport service provider chosen by the customer. In the case of goods to be delivered by courier, the customer’s address will be transmitted in addition to the contact details listed above.
For the purposes of e-store accounting, the necessary customer personal and order data will be provided to a third party (the accounting service provider) and the accounting service provider will ensure that it also complies with the Personal Data Protection Act. Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality or data availability of the e-shop.
Security and data access
Personal data are stored … servers, which are located in the territory of a Member State of the European Union or in the territory of a country that has acceded to the European Economic Area. Access to personal data is granted to the employees of Roosiku OÜ e-shop, who can access personal data in order to resolve technical issues related to the use of the e-shop and to provide customer support services.
The e-shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Transfers of personal data to processors of Roosiku OÜ’s e-shop (e.g. transport service provider and data storage) are based on contracts with the e-shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.
Accessing and correcting personal data
Personal data can be accessed and corrected in the Roosiku OÜ e-shop user profile. If the purchase has been made without a user account, the personal data can be accessed via the login. If the request for access to personal data has been made electronically, the information will also be provided by means of commonly used electronic means.
Withdrawal of consent
If the processing of personal data is based on the consent of the customer, the customer has the right to withdraw the consent in the customer account settings or by informing customer support by e-mail. info@roosiku.ee.
Storage at
When you close your e-shop customer account, your personal data will be deleted, except for personal data (purchase history data) that need to be stored for accounting purposes or to resolve consumer disputes. In the event of disputes relating to payments and consumer disputes, personal data shall be kept until the claim is settled.
until the expiry of the period of limitation or limitation. Personal data contained in the accounting records shall be kept for seven years.
Restriction
You have the right to request the restriction of the processing of your personal data if the data is inaccurate or incomplete or if your personal data is processed unlawfully.
Objections
The customer has the right to object to the processing of his/her personal data if he/she has reason to believe that there is no lawful basis for the processing of his/her personal data.
Deletion
To have your personal data deleted, you must contact customer support by e-mail. info@roosiku.ee. Kustutamistaotlusele vastatakse mitte hiljem kui kuu aja jooksul ning täpsustakse andmete kustutamise perioodi.
The reply to the request will also indicate which personal data will not be deleted and on what legal basis and for what reason.
Transfer to
Requests for the transfer of personal data made by e-mail will be answered within one month at the latest.
The customer support will verify the identity and notify the personal data to be transferred.
Direct marketing communications
The email address and telephone number will be used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the footer of the e-mail or contact customer support.
Dispute resolution
Disputes relating to the processing of personal data can be resolved through customer support by sending an e-mail to. info@roosiku.ee or by calling +372 58056009.
The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
