controller of the personal data of the online shop is Kadipuu
OÜ (registry code 11263270), located at Paldiski
mnt 227-162, Tallinn 13520, Estonia; email firstname.lastname@example.org,
personal data are processed
name, phone number and email address;
bank account number;
cost of goods and services and data related to payments
customer support data.
personal data are processed
data are used to manage the customer’s orders and deliver
history details (date of purchase, goods, quantity, customer’s
data) are used for preparing summaries of goods and services
purchased and for analysing customer preferences.
bank account number is used to reimburse payments to the
data such as email, phone number and the customer's name are
processed to handle any issues relating to the provision of goods and
services (customer support).
IP address or other web identifiers of a user of the online shop are
processed for the provision of the online shop as an information
society service and for web use statistics.
data are processed for the purpose of performing a contract concluded
with the customer.
data are processed for performing legal obligations (such as
accounting and the settlement of consumer complaints).
of personal data
data are transmitted to the customer support of the online shop for
managing purchases and purchase history and for settling any problems
that the customers may have.
name, phone number and email address are transmitted to the transport
service provider selected by the customer. When the goods are
delivered by a courier, the customer’s address is also transmitted
together with the contact details.
the accounts of the web shop are kept by a service provider, the
personal data are transmitted to the service provider for performing
data may be transmitted to IT service providers if this is necessary
for ensuring the functionality of the online shop or for data
and access to data
data are stored in the servers of ____, which are located on the
territory of a member state of the European Union or states of the
European Economic Area. Data may be transferred to the countries
whose data protection levels have been assessed as adequate by the
European Commission and to the companies in the USA who have joined
the Privacy Shield framework.
data can be accessed by the staff of the online shop in order to
settle technical issues related to the use of the online shop and to
provide customer support.
online shop takes appropriate physical, organisational and IT
security measures to protect personal data against accidental or
unlawful destruction, loss, alteration or unauthorised access and
data are transmitted to the data processors of the online shop (such
as the providers of transport and data hosting services) and
processed under contracts concluded between the online shop and the
processors. The processors must ensure appropriate safeguards when
processing personal data.
to and rectification of personal data
data can be accessed and rectified in the user profile of the online
shop. When a purchase has been made without a user account, personal
data can be accessed through customer support.
personal data are processed on the basis of the customer’s consent,
the customer has the right to withdraw his/her consent by notifying
customer support by email.
data are erased upon the closure of a customer account of the online
shop, unless the storage of the data is necessary for accounting
purposes or for the settlement of consumer disputes.
online purchases made without a customer account, the purchase
history is stored for three years.
the event of disputes concerning payments and consumer disputes, the
personal data are stored until the claim is satisfied or until the
end of the limitation period.
data needed for accounting purposes are stored for seven
the erasure of the personal data, customer support must be contacted
via email. requests of erasure are responded to no later than within
one month and the period of erasure shall be
to transmit personal data submitted via email are responded to within
one month. Customer support identifies the person and indicates what
personal data are to be transmitted.
address and phone number are used for sending direct marketing
messages if the customer has given the respective consent. If the
customer does not want to receive direct marketing messages, the
customer should select the relevant link at the footer of the email
or contact customer service.
personal data are processed for direct marketing purposes
(profiling), the customer has the right to object at any time both to
the initial and further processing of his/her personal data,
including profiling related to direct marketing by notifying customer
support thereof via email.
concerning the processing of personal data are settled through
customer support (email@example.com). The supervisory
authority is the Estonian Data Protection Inspectorate (firstname.lastname@example.org).