Processing of personal data

The chief processor of the personal data on sallamanor.com is Exit Trade and Cargo OÜ (registry code: 12550438) located at Lääne-Virumaa, Väike-Maarja municipality, Salla manor, 46302, telephone +372 5364 8800 and email info@sallamanor.com

Which personal data are processed?

name, telephone number and email address;

bank account number;

cost of goods and services, payments-related data (purchase history);

customer support data.

What is the purpose of processing personal data?

Personal data are used for managing customer orders and delivering goods.

Purchase history data (purchase date, goods, quantity, customer data) are used for preparing an overview of the purchased goods and services and analysing customer preferences.

Bank account number is used for refunding payments to customers.

Personal data such as email, telephone number, customer name are processed in order to resolve issues related to selling of goods and services (customer support).

The IP address of the Web Shop user or other network identifiers are processed for the purposes of providing the Web Shop as information society service and web usage statistics.

Legal basis

Processing of personal data is carried out for the purposes of performing the contract concluded with the customer.

Processing of personal data shall be carried out for the purposes of performing legal obligations (e.g. accounting and settlement of consumer disputes).

Recipients to whom personal data is sent

Personal data are sent to the Web Shop’s customer service for managing the purchases and purchase history as well as resolving customer problems.

Name and telephone number are forwarded to the transport service provider and/or goods supplier selected by the customer if the goods are sent by the supplier.

If the Web Shop accounting is conducted by a service provider, the personal data are sent to the service provider in order to perform accounting activities.

Personal data may be forwarded to the providers of information technology services if it is necessary for ensuring functionality and data hosting of the Web Shop.

Security and data access

Personal data is stored in the Zone.ee servers that are located on the territory of European Union member states or countries that have joined the European Economic Area. The data may be forwarded to countries the level of data protection of which has been assessed as sufficient by the European Commission and to companies that have joined the Privacy Shield framework.

Access to personal data is granted to the employees of the Web Shop who can review the personal data in order to solve the technical issues related to the use of the Web Shop and provide customer support service.

The Web Shop shall apply the relevant physical, organisational and IT security measures in order to protect personal data from accidental or illegal destruction, loss, changing or unauthorised access and disclosure.

Exit Trade and Cargo OÜ is the chief processor of personal data, Exit Trade and Cargo OÜ forwards the personal data necessary for carrying out payments to the authorised processor Maksekeskus AS.

Sending of personal data to the authorised processors of the Web Shop (e.g. provider of transport services and data hosting) is carried out on the basis of agreements concluded with the Web Shop and authorised processors. The authorised processors are obliged to ensure relevant protective measures when processing personal data.

Review and updating of personal data

Personal data can be reviewed and updated under the user profile in the Web Shop. If a purchase has been made without a user account, the personal data can be reviewed by contacting customer support.

Withdrawal of consent

If the personal data is processed on the basis of a customer’s consent, the customer shall always have the right to withdraw the consent by notifying the customer support via email.

Storage of data

Upon closing of the customer account in the Web Shop, the personal data is deleted, except if such data is required to be stored for accounting purposes or resolution of consumer disputes.

If a purchase has been made in the Web Shop without a customer account, the purchase history is stored for three years.

In case of disputes related payments and consumer disputes, the personal data is stored up until the claim is fulfilled or the end of the limitation period.

The personal data needed for accounting is stored for seven years.

Deletion

In order to delete personal data, the customer support must be contacted via email. The deletion request is responded to no later than within a month and the period of deletion of data is clarified.

Transfer

The request to transfer personal data submitted via email is responded to no later than within a month. The customer support establishes the identity and notifies of personal data,

Resolution of disputes

Resolution of disputes related to the processing of personal data is carried out via customer support (email: info@sallamanor.com). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).