Responsible for the processing of Vipdoll.ee personal data is Allium est OÜ (registration code 11267835), located at: Pikk tn 10-1 Järve linnaosa, Kohtla-Järve linn Ida-Viru maakond 30328, firstname.lastname@example.org.
What personal data is processed?
- Name, phone number and email address.
- Delivery address;
- Bank account number;
- Cost of goods and services and payment information (purchase history);
- Information on instalments (personal identification code, length of service, employer, salary amount, if necessary, bank statement);
- Information from customer support.
What is the purpose of processing personal data?
Personal information is used to manage customer orders and deliver goods.
Purchase history data (date of purchase, item, quantity, customer details) is used to compile an overview of purchased goods and services and to analyse customer preferences.
The bank account number is used to refund payments to the customer.
Personal data such as email, phone number, customer name is processed to resolve issues related to the delivery of goods and services (customer support).
The post-payment data shall be processed for the purpose of concluding and executing the customer’s hire purchase agreement, including ascertaining the customer’s solvency.
The web store user IP address or other network identifiers are processed to provide the web store as an information society service and to generate statistics on web usage.
Processing of personal data takes place in order to fulfil the contract concluded with the client.
Processing of personal data takes place in order to fulfil a legal obligation (for example, accounting and settlement of consumer disputes).
Data processing is carried out with the consent of the client for the following actions: marketing, notification of new products and campaigns of interest to the client.
Recipients to whom personal information is transmitted
Personal information is transmitted to the online store customer service for managing purchases and purchase history, as well as for solving customer problems.
Name, phone number and email address will be forwarded to a transport representative of your choice.
Personal data can be transferred to information technology service providers if this is necessary to ensure functionality or data placement.
Personal data is transferred to the authorized processor Maksekeskus AS for payments.
Security and data access
Access to personal information is available from employees of the online store, who can access personal information to resolve technical issues related to the use of the online store and to support customers.
Online store implements appropriate physical, organizational and information security measures to protect personal information from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.
The transfer of personal data to authorized processors of an online store (for example, a transport service provider and data hosting) is governed by agreements with an online store and authorized processors. Handlers are required to provide appropriate guarantees for the processing of personal data.
Withdrawal of consent
If processing of personal data is based on the consent of the client, the client has the right to withdraw the consent, notifying the support service by e-mail.
If the purchase in the online store is made without customer account, purchase history is maintained for three years.
In the case of disputes involving payments and consumer disputes, personal data is maintained until the claim is satisfied or until expiration of the limitation period.
Personal data required for accounting is stored for seven years.
To remove personal information, you must contact support service by email. The deletion request must be answered within one month, and the period for deleting the data must be indicated.
Requests for transfer of personal data transmitted by e-mail should be answered within one month. Support service identifies the person and reports personal data to be transferred.
Direct commercial messages
E-mail address and telephone number will be used to send direct marketing messages, subject to customer consent. If the client does not want to receive advertising notifications, select the appropriate link in the email footer or contact customer support.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to oppose the initial and further processing of his personal data, including profiling analysis related to direct marketing, at any time by notifying customer support by email.
Disputes related to the processing of personal data are resolved through the support service. (email@example.com).
Supervisory Authority – Estonian Data Protection Inspectorate (firstname.lastname@example.org).