Personal data being used by the E-commerce www.blancetnoir.eu is under the control of Sounds of Forest OÜ (registry code 12770111) which is located at Estonia, Tallinn, Soo str. 40-5, email address email@example.com.
The type of personal data being processed:
- name, phone number and email address;
- delivery address;
- bank account details;
- the cost of products and services, and payment information (purchase history);
- Client support details.
The purpose of processing personal data:
Personal data helps to manage the Client’s orders and products deliveries.
- Purchase history data (including the date of purchase, the names of the products, and customer data) are used for generating an overview of the products which have been purchased, and for analysing Client preferences.
- The payment details are used for returning payments to the customer.
- Personal data such as email address, phone number, and the name of the Client are processed for the purpose of resolving issues which are related to providing products (customer support).
- The IP address or other online identifiers of the users of the E-commerce are processed in order that an E-commerce service can be provided as an information society service, and for generating statistical data regarding web use.
Personal data is processed for the purpose of the performance of the contract which has been entered into with the Client.
Personal data is processed for the purpose of fulfilling legal obligations (e.g. bookkeeping and resolving Client complaints).
Recipients of personal data
The name, address, phone number are submitted to thecompany providing the shipping service.
Personal data will be submitted to the service provider for the purpose of providing bookkeeping services.
Personal data will be submitted to information technology service providers if this is necessary in order to ensure the functionality of the E-commerce or data hosting.
Payments are made outside of the environment of the E-scommerce, in the secure payment environment of the selected bank or other service provider.The personal data which arerequired for making Credit or Debit card payments shall be disclosed to the payment facilitator company Maksekeskus AS.
Data security and access to data
Personal data are stored on the server of Sounds of Forest OÜ which is located within the territory of an EU.Data may be submitted to countries with a sufficient level of data protection as per the assessment of the European Commission, and to US companies who are certified under the Privacy Shield Framework.
Access to personal data is granted to the employees of the E-commerce who can examine the personal data in order to resolve technical issues which are related to the use of the online store.
The E-commerce will apply relevant physical, organisational, and IT security measures in order to protect the personal data from accidental or unlawful destruction, loss, or amendment, and any unauthorised access or disclosure.
Upon the submission of personal data to the processors who have been appointed by the E-commerce (e.g. transport service providers and data hosting), personal data is processed on the basis of agreements which have been entered into between the E-commerce and the processors. The processors must ensure the use of relevant safeguards when processing personal data.
The retention of personal data
Upon closing a customer account with the E-commerce, personal data are deleted unless such data need to be retained for the purposes of bookkeeping or to resolve Client complaints.
If the purchase was made from the E-commerce without a customer account, the purchase history will be retained for three years.
In cases of disputes arising which are related to payments and Client complaints, personal data are retained until the claim is satisfied or the limitation period has passed (this being three years).
Personal data which are necessary for the provision of bookkeeping services are retained for seven years.
Deleting personal data
In order to have personal data deleted, customer support must be contacted via email. The response to the deletion request will be provided within one month, specifying the data deletion period.
Transferring personal data
The response to a request for transfer which is submitted via email will be provided within one month. The customer support department identifies the person and provides notification of the data which is to be transferred.
Any disputes which are related to the processing of personal data will be resolved via customer support (email: firstname.lastname@example.org). The supervisory authority is the Estonian Data Protection Inspectorate (email@example.com).