Processing of personal data
The chief processor of personal data of the varvx.ee online store is VärvX OÜ (registry code 11370349; legal address: Miku tee 11, Ahisilla Village, Kose Parish, 75111 Harju County; phone number +372 524 3036 and e-mail info@varvx.ee.) Types of processed personal data
- Name, phone number, and e-mail address
- Delivery address
- Bank account number
- Cost of goods and services, and payment-related data (purchase history)
- Customer support details
For what purpose is personal data processed? VärvX OÜ is the chief processor of personal data and forwards the personal data necessary for making payments to the authorised processor Maksekeskus AS. Submitted personal data are used for managing the customer’s orders and delivering the goods. Purchase history data (date of the purchase, goods, quantity, customer details) are used for preparing an overview of the purchased goods and services and for analysing customer preferences. The bank account number is used for making refunds to the customer. Contact details such as the customer’s e-mail address, phone number and name are processed for resolving any issues related to the provision of the goods and services (customer support). The IP address and other network identifiers of a user of the online store are processed for providing the online store service as an information society service as well as for producing web usage statistics. Legal basis Submitted personal data are processed for the performance of the agreement concluded with the customer. Submitted personal data are processed for compliance with legal obligations (for example, accounting and settlement of consumer disputes). Recipients of personal data Submitted personal data are transmitted to the customer support team of the online store for managing purchases and purchase histories as well as resolving any customer issues. The name and phone number of the customer will be provided to the transport service provider and/or supplier of the goods chosen by the customer, if the consignor of the goods is the supplier. In the case of goods delivered by a courier, or if the customer orders the goods to a post office, the customer’s address will also be forwarded in addition to the contact details. In the case that accounting of the online store is performed by a service provider, the latter will be provided with the personal data necessary to carry out the accounting operations. Personal data may be transmitted to information technology service providers, if it is necessary for the functionality or data hosting of the online store. Security and access to data Submitted personal data are stored on Zone.ee servers which are located within the territory of the member states of the European Union or countries that have joined the European Economic Area. The data may be transmitted to countries wherein the level of data protection has been deemed sufficient by the European Commission as well as to companies which have joined the Privacy Shield framework. Access to submitted personal data is granted to the employees of the online store for resolving technical issues related to the use of the online store and for providing customer support. The online store shall implement the appropriate physical, organisational and information technology security measures to protect the personal data against accidental or unlawful destruction, loss and alteration as well as unauthorised access and disclosure. Personal data are transmitted to the online store’s data processors (for example, transport and data hosting service providers) under agreements concluded between the online store and the data processors. Authorised processors are required to ensure that appropriate security measures are taken when processing the personal data. Accessing and amendment of the personal data Personal data shall be available for accessing and amendment in the user profile of the online store. Personal data related to purchases made without a user account shall be accessible via customer support. Withdrawal of consent In cases where the processing of personal data is carried out on the basis of the consent of the customer, the customer has the right to withdraw their consent by notifying customer support by e-mail. Retention Upon closure of a customer account in the online store, any personal data shall be deleted, unless the retention of the data is required for accounting purposes or for the resolution of consumer disputes. Histories of purchases made without a customer account shall be retained for three (3) years. In the event of disputes relating to payments or consumer disputes, related personal data shall be retained until the settlement of the claim or the end of the validity period. Personal data which are necessary for accounting shall be retained for seven (7) years. Deletion If you wish to have your personal data deleted, please contact our customer support team by e-mail. Requests for deletion shall be answered no later than within one (1) month and shall include a specification of the data deletion period. Transfer Requests submitted by e-mail for the transfer of personal data shall be answered within one (1) month. In such cases, customer support shall verify the requester’s identity and notify the requester about the personal data to be transferred. Direct marketing messages The customer’s e-mail address and phone number may be used for sending direct marketing messages, if the customer has given their consent. If the customer does not wish to receive direct marketing messages, they may opt out by using a link in the footer of such e-mails or by contacting customer support. In the case of the processing of personal data for direct marketing purposes (profiling), the customer has the right to object to the prior as well as the further processing of their personal data, including for profile analysis related to direct marketing, at any time by notifying customer support by e-mail (the notification must be presented clearly and separately from any other information). Settlement of disputes Disputes relating to the processing of personal data shall be resolved via customer support by e-mail info@varvx.ee. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
Cookies
What are cookies?
Our website uses cookies. A cookie is a small piece of data in the form of a text in your web browser that the website sends to a cookie file on your computer. Cookies allow our website to provide you with a better user experience and to design and develop our website so that service provided is of the highest possible quality. By continuing to use our website, you also agree to the use of cookies. If you do not want cookies to be stored on your computer, you can block them in your browser settings. In such a case, cookies from us or any other website will not be stored, but as a result not all features of the website may work properly.
Cookies used on our website
Essential cookies These cookies play an important role in the operation of our site. For example, this includes cookies which allow you to navigate to the right pages when we update our website. Operational cookies These cookies collect information about how visitors use the website. This allows us to detect if an error has occurred. We do not collect personally identifiable information, but anonymous data. We only use this information to improve the operation of the website.