PROCESSING OF PERSONAL DATA
The controller of the personal data for the online shop birdbusters.eu is Salu OÜ (registry code 12600389), located at Kunderi 27-10, Tallinn, phone +372 52198 22 and e-mail firstname.lastname@example.org.
Collection and use of personal data
The personal data are any data directly or indirectly related to a customer of the online shop which are needed to perform a contract signed with an individual or to contact him/her, and to perform the duties arising from the law.
Personal data are collected when contact information is submitted on the website during checkout.
The following personal data are processed:
− name, phone number and e-mail address;
– delivery address;
– bank account number;
– cost of goods and services, and payment information (purchase history);
– customer support data.
Personal data are used to manage a customer’s orders and deliver the goods ordered.
Purchase history (purchase date, goods, quantity, customer data) is used to prepare overviews of the goods and services purchased and to analyse customer preferences.
Bank account number is used to refund any payments to the customer.
Personal data such as e-mail, phone number and customer’s name are processed to resolve any issues in the provision of goods and services (customer support).
The IP address or other online identifiers of a user of the online shop are processed to provide the online shop as an information society service and for web use statistics.
Recipients of personal data
Personal data are transmitted to the customer support of the online shop to manage the purchases and purchase history and to resolve any issues customers may have.
Name, telephone number and e-mail address are transmitted to the authorised partner Pakipoint OÜ, which transmits these to the transportation service provider selected by the customer.
If the goods are delivered by a courier, the customer’s address is also transmitted in addition to the contact information.
Personal data are transmitted to the accounting company Probil OÜ for accounting operations.
Personal data may be transmitted to information technology service providers if needed to ensure the functioning of the online shop or data hosting.
The goods are paid for outside the online shop in a secure platform – in case of payment by bank link, in the secure platform of the respective bank or in the secure platform of the processor Maksekeskus AS. The seller has no access to the customer’s bank and credit card information.
Security and data access
Personal data are stored in the servers of Netpro OÜ. Access to personal data is granted to the online shop employees who can access such data to resolve any technical issues in the use of the online shop and to provide customer support. The online shop implements appropriate physical, organisational and information technology measures to protect the personal data against accidental or illegal destruction, loss, amendment or unauthorised access and publishing.
The personal data are transmitted to the processors of the online shop (e.g. transportation service provider and data hosting) based on the agreements signed between the online shop and the processors. The processors are required to implement appropriate protection measures when processing personal data. The processors authorised by the online shop are Pakipoint OÜ, Probil OÜ, Netpro OÜ and Maksekeskus AS.
Personal data storage
If a customer’s account in the online shop is closed, the personal data are erased, except where such data need to be stored for accounting purposes or for resolving consumer disputes.
The history of the purchases made in the online shop is stored for three years. In the event of payment disputes and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period. The personal data needed for accounting purposes are stored for seven years.
Access to and rectification and erasure of personal data
Personal data can be accessed and rectified through the customer support. The customer has the right to request that the personal data concerning him/her be erased from the databases of birdbusters.eu by notifying the customer support thereof by e-mail. The request for erasure is responded to within one month at the latest and the period for which the data are to be erased is specified.
Resolution of disputes
The disputes concerning personal data processing are resolved via customer support by e-mailing to email@example.com or calling +372 5267 138. The supervisory authority is the Estonian Data Protection Inspectorate (firstname.lastname@example.org).