Privacy Policy
Processing of Personal Data
The controller of personal data of the online shop TULEPOOD.EE is PYRO1 OÜ (registry code 17373679), pyrotechnic articles sales licence no.: LPK000174, located at Punane 40, Tallinn, e-mail pood@tulepood.ee. The controller has appointed Anton Babenko as data protection officer, whose contact details are: +37258470147 and e-mail pood@tulepood.ee
What personal data is processed
- name, telephone number and e-mail address;
- delivery address of the goods;
- bank account number;
- cost of goods and services and payment-related data (purchase history);
- customer support data.
For what purposes personal data is processed
Personal data is used to manage customer orders and to deliver goods.
Purchase history data (date of purchase, goods, quantity, customer data) is used to compile an overview of purchased goods and services and to analyse customer preferences
The bank account number is used to refund payments to the customer.
Personal data such as e-mail, telephone number and customer name is processed in order to resolve questions related to the provision of goods and services (customer support).
The IP address or other network identifiers of the online shop user are processed in order to provide the online shop as an information society service and to compile web usage statistics.
Legal basis
Personal data is processed for the purpose of performing the contract concluded with the customer.
Personal data is processed in order to comply with a legal obligation (e.g. accounting and the resolution of consumer disputes).
Recipients to whom personal data is transferred
Personal data is transferred to the customer support of the online shop for managing purchases and purchase history and for resolving customer issues.
Name, telephone number and e-mail address are transferred to the transport service provider chosen by the customer. Where the goods are delivered by courier, the customer’s address is transferred in addition to the contact details.
If the accounting of the online shop is performed by a service provider, personal data is transferred to the service provider for performing accounting operations.
Personal data may be transferred to information technology service providers where this is necessary to ensure the functionality of the online shop or data hosting.
Security and access to data
Personal data is stored on ZONE.EE servers located in the territory of a Member State of the European Union or of a country that has joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission, and to US companies that have joined the Privacy Shield framework.
Personal data is accessible to the employees of the online shop, who may access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support.
The online shop applies appropriate physical, organisational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Personal data transferred to the processors of the online shop (e.g. the transport service provider and data hosting) is processed on the basis of contracts concluded between the online shop and the processors. Processors are obliged to ensure appropriate safeguards when processing personal data.
Access to and rectification of personal data
Personal data can be accessed and corrected in the user profile of the online shop. If the purchase was made without a user account, personal data can be accessed through customer support.
Withdrawal of consent
Where personal data is processed on the basis of the customer’s consent, the customer has the right to withdraw consent by notifying customer support by e-mail.
Retention
When an online shop customer account is closed, the personal data is deleted, unless such data must be retained for accounting purposes or for the resolution of consumer disputes.
If a purchase was made in the online shop without a customer account, the purchase history is retained for three years.
In the event of disputes related to payments or consumer disputes, personal data is retained until the claim has been satisfied or until the end of the limitation period (three years).
Personal data required for accounting is retained for seven years.
Erasure
To have personal data erased, please contact customer support by e-mail. A request for erasure will be answered no later than within one month, and the period for erasure of the data will be specified.
Data portability
A request for data portability submitted by e-mail will be answered within one month at the latest. Customer support will verify the identity of the person and will inform them of the personal data subject to portability.
Direct marketing messages
The e-mail address and telephone number are used to send direct marketing messages if the customer has given the corresponding consent. If the customer does not wish to receive direct marketing messages, they should select the relevant link in the e-mail header or contact customer support.
Where personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profile analysis related to direct marketing, by notifying customer support by e-mail.
Dispute resolution
Disputes related to the processing of personal data are resolved through customer support (pood@tulepood.ee).
The supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) (info@aki.ee)