PERSONAL DATA PROCESSING
The responsible processor of personal data for the e-store e-kalastus.ee is E-Kalastus OÜ (registry code 16716344), located at Käänu tn 9, Kõrveküla village, Tartu Parish, Tartu County, 60532. Email: info@e-kalastus.ee. E-Kalastus OÜ is the responsible processor of personal data; E-Kalastus OÜ transmits the personal data necessary for payment processing to the authorized processor Montonio AS.
What personal data is processed
- name, phone number, and email address
- delivery address for the goods
- bank account number
- Cost of goods and services and payment-related data (purchase history)
- Customer support data
- IP address
Purpose of Processing Personal Data
Personal data is used to manage customer orders and deliver goods.
Purchase history data (purchase date, product, quantity, customer information) is used to compile an overview of purchased goods and services, analyze customer preferences, and, among other purposes, to resolve consumer disputes.
The bank account number is used to refund payments to the customer.
Personal data such as email, phone number, and customer name are processed to resolve issues related to the provision of goods and services (customer support). The email is additionally used for sending invoices, and the phone number is used to notify about goods that have arrived at a parcel machine.
The IP address or other network identifiers of the web store user are processed for the provision of the web store as an information society service and for generating web usage statistics.
Legal Basis
Personal data is processed for the purpose of fulfilling a contract with the customer (managing customer orders, delivery, and returns of goods and payments).
Personal data is processed to comply with a legal obligation (e.g., accounting and resolving consumer disputes).
Processing of personal data is necessary due to the legitimate interest of the responsible processor, which consists of collecting purchase history data for the purpose of resolving potential consumer disputes.
Recipients to whom personal data is disclosed
Name, phone number, and email address are disclosed to the transport service provider chosen by the customer. If the goods are delivered by courier, the customer’s address is also disclosed in addition to the contact details.
If the web store’s accounting is handled by a service provider, personal data is disclosed to the service provider for performing accounting operations.
Personal data may be disclosed to information technology service providers if necessary to ensure the functionality or data hosting of the web store.
Security and Data Access
Personal data is stored on Zone Media OÜ servers located within the territory of a European Union member state or a country that has joined the European Economic Area. Data may be transferred to countries whose level of data protection has been deemed adequate by the European Commission or to a third-country company for which the safeguard measures referred to in Article 46 apply.
Access to personal data is granted to the web store employees who may review personal data in order to resolve technical issues related to the use of the web store and to provide customer support services.
The web store implements appropriate physical, organizational, and information technology security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure.
The transfer of personal data to authorized processors of the web store (e.g., transport service provider and data hosting) is based on contracts concluded between the web store and the authorized processors. Authorized processors are obligated to ensure appropriate protective measures when processing personal data.
Accessing and Correcting Personal Data
Personal data can be accessed and corrected in the user profile of the web store. If a purchase was made without a user account, personal data can be accessed through customer support. If a request to access personal data is submitted electronically, the information will also be provided through commonly used electronic means.
Withdrawal of Consent
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw consent in the customer account settings or by notifying customer support via email.
Retention
When a web store customer account is closed, personal data is deleted, except for personal data (purchase history data) that must be retained for accounting purposes or for resolving consumer disputes. In the case of disputes related to payments and consumer disputes, personal data is retained until the claim is fulfilled or the statute of limitations expires. Personal data contained in original accounting documents is retained for seven years.
Restriction
The customer has the right to request the restriction of the processing of their personal data if the data is incorrect or incomplete, or if their personal data is processed unlawfully.
Objections
The customer has the right to submit objections in connection with the processing of their personal data if they have reason to believe that there is no legal basis for the processing of their personal data.
Deletion
To delete personal data, you must contact customer support via email. A deletion request will be responded to within no later than one month, and the period for data deletion will be specified.
The response to the request will also specify which personal data will not be deleted and on what legal basis and reason.
Transfer
A request for the transfer of personal data submitted via email will be responded to within one month at the latest.
Customer support verifies identity and informs about the personal data subject to transfer.
Direct Marketing Notices
The email address and phone number are used for sending direct marketing communications if the customer has given the corresponding consent. If the customer does not wish to receive direct marketing notices, they must select the appropriate link in the email footer or contact customer support.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support via email.
Dispute Resolution
Disputes related to the processing of personal data are resolved through customer support by sending an email to epood(at)voblafishing.ee
The supervisory authority is the Estonian Data Protection Inspectorate info(at)aki.ee.