PRIVACY CONDITIONS
These privacy conditions contain information on how and for what purpose Meresmaafoto OÜ (the administrator of the website www.meresmaafoto.ee) collects, processes, and shares personal data.
The data controller of personal data on the online store www.meresmaafoto.ee is Meresmaafoto OÜ (registry code 12416487) located at Luite tee 5, Tiskre, Harku Rural Municipality, tel +372 520 4003 and e-mail sven@meresmaafoto.ee.
By visiting and reading this page, you acknowledge that you have read, understood, and agree to be bound by these conditions.
WHICH PERSONAL DATA ARE PROCESSED
- contact information – first and last name, telephone number, and e-mail address,
- delivery address of the goods,
- bank account number,
- cost of goods and services and data related to payments (purchase history).
PURPOSE OF THE PROCESSING OF PERSONAL DATA
Personal data is used to manage customer orders and deliver goods.
Purchase history data (purchase date, goods, quantity, customer data) are used to compile an overview of purchased goods and services and to analyse customer preferences.
The bank account number is used to return the payment to the customer in case of cancellation of the order.
Personal data, such as the e-mail address, telephone number, customer’s first and last name, are processed to resolve issues related to the provision of goods and services.
The IP address or other network identifiers of the online store user are processed to provide information society services in the online store and to compile website usage statistics.
RECIPIENTS TO WHOM PERSONAL DATA ARE TRANSFERRED
Meresmaafoto OÜ does not transfer customer data outside the European Economic Area. The information provided by the customer is treated as confidential and the personal data of the customers is not disclosed to third parties, except in the following cases:
- contact information is transferred to the parcel machine service provider selected by the customer or the service provider who allows to receive goods from the post office chosen by the customer (authorised customer data processors – AS Eesti Post, Itella SmartPOST OÜ). In the case of goods delivered by courier or regular mail, the customer’s postal address will also be forwarded to the service provider in addition to the above information (authorised customer data processors – AS Eesti Post);
- if it is necessary to use the services of so-called support service providers, such as IT support, data processing, auditor, etc. to better ensure the functionality or data hosting of the online store. All service providers are data processors authorised by Meresmaafoto OÜ, who have the right to process personal data received from us only to the extent necessary for the provision of the service and only on the basis of instructions given by us and agreements with authorised data processors. Authorised data processors are required to ensure appropriate safeguards for the processing of personal data;
- state supervisory authorities (e.g. police, security police, etc.);
- debt collection companies (e.g. payment default registers, enforcement agents).
CUSTOMER DATA SECURITY AND ACCESS TO DATA
Personal data are stored on the servers of Zone Media OÜ (information on the data protection rules of the service provider can be found here), which are located in the territory of a Member State of the European Union or states that have acceded to the European Economic Area. Data may be transferred to states whose level of data protection has been assessed as adequate by the European Commission and to US companies that have acceded to the Privacy Shield framework.
Access to personal data is granted to the online store’s data processor responsible for the personal data, who can access the personal data in order to resolve technical issues related to the use of the online store and to provide customer support.
The online store implements appropriate physical, organisational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised access or publication.
All network traffic between the customer’s computer and the server is encrypted using the RapidSSL certificate.
ACCESS TO AND CORRECTION OF PERSONAL DATA
Personal data can be accessed and corrected in the user account of the online store or through the online store’s data processor responsible for the personal data. If the purchase has been made without a user account, the personal data can be accessed through the online store’s processor responsible for the personal data.
WITHDRAWAL OF CONSENT
If the processing of personal data takes place on the basis of the customer’s consent, the customer has the right to withdraw the consent by notifying the online store’s processor responsible for the personal data by e-mail (e-mail: sven@meresmaafoto.ee)
DATA RETENTION
Upon closing the customer’s user account, the customer’s personal data shall be deleted, unless such data needs to be retained for accounting purposes or for the resolution of consumer disputes.
If the purchase in the online store has been made without a user account, the purchase history will be retained for three years.
In the case of disputes related to payments and consumer disputes, personal data will be retained until the claim is performed or the limitation period expires.
Personal data required for accounting purposes shall be retained for seven years.
DELETION OF CUSTOMER-RELATED DATA
To delete the customer’s personal data, the processor responsible for the personal data must be contacted by e-mail (e-mail: sven@meresmaafoto.ee). A deletion request shall be answered no later than in one month and the period for deletion of data shall be specified.
DISPUTE RESOLUTION
Disputes related to the processing of personal data are resolved in communication with the processor responsible for personal data by e-mail (e-mail: sven@meresmaafoto.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).