PERSONAL DATA PROCESSING
The data controller of the personal data collected in the www.foodkit.ee online store is Cuce-Camp OÜ (11374258), address: Kata, Kose municipality, 75103 Harju County, Estonia, mobile: +372 53 747 506, e-mail: firstname.lastname@example.org
Cuce-Camp OÜ transmits the personal data required for making payments to the data processor Maksekeskus AS.
What personal data are processed?
− name, telephone number and e-mail address
− delivery address
− bank account number
− price of goods and services and payment data (purchase history)
− customer support data
Why are personal data processed?
Personal data are used to manage the customer’s orders and to deliver goods.
Purchase history details (date of purchase, goods, quantity and customer data) are used to prepare overviews of goods and services purchased and to analyse customer preferences.
The bank account number is used to refund payments to the customer.
Personal data such as the customer’s name, e-mail address and telephone number are processed in order to resolve issues relating to the provision of goods and services (customer support).
The IP addresses or other online identifiers of users of the online store are processed for the provision of the store as an information society service and for web use statistics.
Personal data are processed for the purpose of fulfilling a contract entered into with the customer.
Personal data are processed to perform legal obligations (such as accounting and the resolution of consumer complaints).
Recipients of personal data
Personal data are forwarded to the customer support of the online store to manage purchases and purchase history and to resolve any problems that customers may have.
Name, telephone number and e-mail address are forwarded to the transport service provider selected by the customer. If the goods are delivered by a courier, the customer’s address and contact details are forwarded to the courier.
If an outside service provider handles the accounting for the online store, the personal data are forwarded to that service provider to perform the accounting operations.
Personal data may be forwarded to IT service providers if this is needed to ensure the functionality of the online store or to host data.
Security and access to data
Personal data are stored on the servers of Zone Media OÜ, which are located in a Member State of the European Union or a member country of the European Economic Area. Data may be transferred to countries whose data protection levels have been assessed as adequate by the European Commission and to companies in the United States that have joined the Privacy Shield framework.
The staff of the online store have access to personal data in order to resolve technical issues related to the use of the online store and to provide customer support.
The online store takes appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss or alteration and unauthorised access and disclosure.
Personal data are forwarded to the data processors of the online store (such as the providers of transport and data hosting services) and processed under contracts entered into between the online store and the processors. The processors must ensure appropriate safeguards when processing personal data.
Access to and correction of personal data
Personal data can be accessed and corrected in the user profile of the online store. If a purchase is made without a user account, personal data can be accessed via customer support.
Withdrawal of consent
If personal data are processed on the basis of the customer’s consent, the customer has the right to withdraw their consent by informing customer support thereof via e-mail.
Personal data are erased upon the closure of a customer account in the online store, unless the storage of the data is necessary for accounting purposes or for the resolution of consumer disputes.
The purchase history of online purchases made without a customer account is stored for three years.
In the event of disputes concerning payments and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period.
Personal data needed for accounting purposes are stored for seven years.
For the erasure of personal data, customer support must be contacted via e-mail. Requests for erasure are responded to within one month and the period of erasure is specified.
Transfer of data
Requests to transfer personal data submitted via e-mail are responded to within one month. Customer support identifies the person and indicates which personal data are to be transferred.
Direct marketing messages
The e-mail address and telephone number are used for sending direct marketing messages if the customer has consented to receiving such messages. If the customer does not wish to receive direct marketing messages, they should select the relevant link at the footer of the e-mail or contact customer service.
Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object to such processing, including profiling related to such direct marketing, whether with regard to initial or further processing, at any time by notifying customer support thereof via e-mail at email@example.com.
Resolution of disputes
Disputes concerning the processing of personal data are resolved by contacting customer support: call +372 53 747 506 or e-mail firstname.lastname@example.org.
The supervisory authority is the Estonian Data Protection Inspectorate (email@example.com).