Privacy Policy
The controller of the personal data of the online shop hylda.voog.com is is Hylda OÜ (registry code 16159866), postal address Kloostrimetsa tee 50, 11913 Tallinn, Estonia, phone +372 50 87829 and e-mail hyldatextiles@gmail.com.Which personal data are processed?
– name, phone number and e-mail address;
– delivery address;
– bank account number;
- bank card details;
– cost of goods and services and data related to payments (purchase history);
– IP address.
Personal data is used to manage the customer’s orders and to deliver goods.
Purchase history data (date of purchase, goods, quantity, customer data) are used to put together an overview of the goods and services purchased, to analyse customer preferences and, among other things, for the purposes of resolving consumer disputes.
The bank account number is used to reimburse payments to the customer.
Personal data such as the e-mail address, telephone number and name of the customer are processed to handle any issues relating to the provision of goods and services (customer support).
E-mail is also used in order to forward invoices and the telephone number is used to notify the customer about their goods arriving in the parcel locker.
The IP address or other online identifiers of users of the online shop are processed for the provision of the online shop as an information society service and for web use statistics.
Legal basis
The purpose of processing personal data is to fulfil the agreement entered into with the customer (managing the customer’s orders, delivery, returning goods and reimbursing payments). Personal data are processed in order to fulfil legal obligations (e.g. for accounting). The processing of personal data, i.e. the collection of purchase history data for the purposes of resolving potential consumer disputes, is necessary due to the controller’s legitimate interest.
Recipients of personal data
Personal data is forwarded to Montonio Finance UAB for mediating online store payments.
Name, telephone number and e-mail address are forwarded to the transport service provider selected by the customer. If the goods are delivered by a courier, the customer’s contact details, as well as their address, are forwarded to the courier.
Personal data is forwarded to the accounting service provider to perform the accounting operations.
Personal data may be forwarded to IT service providers if this is needed to ensure the functionality of the online shop or to host data.
Security and access to data
All personal information of the customer disclosed in the course of transactions will be treated as confidential information. The online shop implements appropriate physical, organisational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure. The transfer of personal data from the online shop's authorised processors to recipients (e.g. transport service providers Eesti Post AS, Itella Estonia OÜ, DPD Eesti AS; e-shop service provider Edicy OÜ, payment service intermediary Montonio Finance UAB) is carried out on the basis of contracts concluded between the owner of the online shop Hylda OÜ and the processors.
The processors are obliged to ensure appropriate safeguards for the processing of personal data in accordance with Article 28 of the GDPR.
Access to and rectification of personal data
Personal data can be accessed and rectified via customer support. If the request to access personal data has been submitted electronically, the information will also be provided via commonly used electronic means.
Withdrawal of consent
If personal data is processed with the customer’s consent, the customer has the right to withdraw their consent by notifying customer support via e-mail.
Storage
Personal data is erased upon deleting the online shop’s customer account, except for the personal data (purchase history) which is necessary for accounting or to resolve consumer disputes. In the event of disputes regarding payments and consumer disputes, personal data is stored until the claim is settled or the limitation period expires. The personal data in original accounting documents is stored for seven years.
Restriction
If the data is incorrect, incomplete or processed unlawfully, the customer has the right to request the restriction of the processing of their personal data.
Objections
The customer has the right to submit objections regarding the processing of their personal data if they have a reason to believe that there is no legal basis to process their personal data.
Erasure
For the erasure of personal data, customer support should be contacted by e-mail. Requests for erasure are responded to within one month and the period of erasure is specified. The response to the request will also indicate which personal data will not be erased, on which legal basis and why.
Transfer
Requests to transfer personal data submitted via e-mail are responded to within one month. Customer support identifies the person and indicates which personal data is to be transferred.
Resolution of disputes
Disputes concerning the processing of personal data are settled through customer support (email: hyldatextiles@gmail.com, phone: +372 5087829). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee)