PERSONAL DATA PROCESSING
The personal data processor for JÕHVI KULDKALAKE OÜ is kuldkalake.eu (reg. No. 10200616), located at Salu tn 1-12, Kohtla-Järve, Ida-Virumaa, Estonia, phone (+372) 56 20 20 67, and email info@kuldkalake.eu. The processor has appointed a data protection officer, whose contact details are: (+372) 56 20 20 67 and email info@kuldkalake.eu.
What personal data is processed
— Name, phone number, and email address;
— Delivery address;
— Cost of goods and services and payment information (purchase history);
— Customer support information.
Purpose of processing personal data
Personal information is used to manage customer orders and deliver goods.
Purchase history data (purchase date, item, quantity, customer information) is used to compile an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used to process refunds to the customer.
Personal information, such as email, phone number, and customer name, is processed to address issues related to goods and services (customer support).
The IP address of the online store user or other network identifiers is processed by the online store to provide information society services and web usage statistics.
Legal basis
Personal data is processed to fulfill a contract with the customer.
Personal data processing is carried out to meet legal obligations (e.g., accounting and resolving consumer disputes).
Data processing is performed with the customer’s consent for the following actions: marketing, notifications about new products, and campaigns of interest to the customer.
Recipients to whom personal data is transferred
Personal information is transferred to the online store’s customer support for managing purchases and purchase history, as well as resolving customer issues.
Name, phone number, and email address are forwarded to the transport service provider of your choice. For goods delivered by courier, the customer’s address must also be provided alongside online information.
If the online store is serviced by a service provider, personal data will be transferred to the service provider for accounting purposes.
Personal information may be transferred to IT service providers if necessary to ensure the functionality of the online store or data hosting.
Security and data access
Personal data is stored on servers of OÜ Virtuaal.com, located within the territory of a European Union member state or countries in the European Economic Area. Data may be transferred to countries assessed by the European Commission as having an adequate level of data protection or to U.S. companies bound by the Privacy Shield framework.
Access to personal information is available to online store employees who may access personal data to resolve technical issues related to the use of the online store and to provide customer support. The online store implements appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.
The transfer of personal data to trusted processors of the online store (e.g., transport service providers and data hosting) is governed by agreements between the online store and the trusted processors. Processors are obligated to provide appropriate safeguards for processing personal data.
JÕHVI KULDKALAKE OÜ is the personal data processor and transfers personal data necessary for payments to the trusted processor PaySera.com.
Access and correction of personal data
Personal data can be accessed and modified in the online store’s profile. If a purchase is made without a user account, access to personal information can be obtained through customer support.
Withdrawal of consent
If personal data is processed with the customer’s consent, the customer has the right to withdraw consent by notifying customer support via email.
Retention
Closing a customer’s online store account will result in the deletion of personal information unless there is a need to retain such data for accounting purposes or to resolve consumer disputes.
If a purchase is made without a customer account in the online store, purchase history is retained for three years.
In case of disputes related to payments or consumer disputes, personal data is retained until the claim is resolved or the statute of limitations expires.
Personal data required for accounting purposes is retained for seven years.
Deletion
To delete personal information, contact customer support via email. A deletion request must be responded to within no more than one month, and the deletion period must be specified.
Transfer
Requests for the transfer of personal data via email must be responded to within a maximum of one month. Customer support will identify and inform you about the personal data subject to transfer.
Marketing communications
The email address and phone number will be used to send marketing communications with the customer’s consent. If the customer does not wish to receive marketing notifications, select the appropriate link in the email footer or contact customer support.
If personal data is processed for marketing purposes (profiling), the customer has the right to object to the initial and further processing of their personal data, including profiling analysis related to direct marketing, by notifying customer support via email.
Dispute resolution
Disputes related to the processing of personal data are resolved through customer support (info@kuldkalake.eu). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).