Personal data are used to administer customers’ orders and to deliver goods; and to make discounted offers.
Purchase history data (purchase dates, goods, quantities, customer data) are used to prepare a report of purchased goods and services and to analyse customer preferences.
The bank account number is used to issue refunds to customers.
Personal data (such as email, telephone number, customer name) are processed to resolve issues related to sales of goods and services (customer support).
The web store user’s IP address or other network identifiers are processed by the online store for provision of digital services and web use statistics.
Processing of personal data takes place for purposes of performance of agreements with customers.
Processing of personal data takes place for performing legal obligations (such as accounting and resolution of consumer disputes).
Processing of personal data takes place with the customer’s consent for the following activities: profiling (newsletter).
Personal data is transmitted to online store customer support to administer purchases and purchase history and resolve customer problems.
Name, telephone number and email address are transmitted to the transport service provider chosen by the customer. If the goods are to be delivered by courier service, the customer’s address is also conveyed.
If the accounting for the web store is done by an outside service provider, the personal data will be sent to that provider for accounting purposes.
Personal data may be sent to IT service providers if needed to ensure functionality or hosting of the web store.
Personal data shall be stored on servers at zone.ee, located on the territory of an EU or EEA country. The data may be sent to countries the level of whose data protection has been deemed by the European Commission to be adequate and to US companies that have joined the Privacy Shield framework.
Web store employees have access to personal data to resolve technical issues related to use of web store and to provide customer support.
Transmission of personal data to the web store’s processors (as defined in the GDPR) and hosting takes place on the basis of agreements between web store and processors. Processors are obliged to take the appropriate protection measures when processing personal data.
Personal data may be examined and corrected in the online store customer profile. If the purchase was made without a user account having been set up, the personal data can be examined via customer support.
If the processing of personal data takes place on the basis of customer’s consent, the customer may rescind said consent by notifying customer support by email.
When any web store customer account is closed, the associated personal data is deleted, unless retention is required by the Accounting Act or they are needed to resolve a consumer complaint.
Under the terms of the web store, purchases may be made without having a customer account. In such cases, the purchase history will be retained for three years.
In the event of disputed payments and consumer disputes, the personal data shall be retained until the claim is discharged or until the end of the period of limitations.
Personal data needed for accounting shall be retained for seven years.
To have personal data deleted, contact customer support by email. The request for deletion will be reviewed within one month and the period of deletion of data will be specified.
An emailed request for transfer of personal data will be reviewed within one month. Customer support will determine the identity of the person and provide notice as to the personal data subject to transfer.
Email address and telephone number will be used for direct marketing only if the customer gave express consent for this. Consent can be given and rescinded on the customer account page. If the customer does not wish to to receive direct promotional messages, they can unsubscribe using the link in the footer of the email or contact customer support.
If personal data are processed for direct promotional messages (profiling) the customer is entitled to make objections at ay time in regard to the initial and subsequent processing of their personal data, including in regard to profiling related to direct advertising, by notifying customer support thereof by email (the corresponding information must be expressed clearly and separately from any other communications).