The personal data controller of the online shop pood.orkla.ee is Orkla Eesti AS (registration code 11267031), Põrguvälja tee 6, Lehmja, 75306 Rae parish, Harju County, Estonia, telephone +372 6877 710 and e-mail info@orkla.ee.
The following personal data are processed to provide services:
- first name and surname, telephone number and e-mail address;
- delivery address;
- bank account number;
- cost of goods and services.
For which purposes are personal data processed?
- Personal data are used to manage the customer’s orders and deliver goods.
- The bank account number is used to reimburse payments to the customer.
- Personal data such as the e-mail address, telephone number and name of the customer are processed to handle any issues relating to the provision of goods and services.
- The IP address or other online identifiers of users of the online shop are processed for the provision of the online shop as an information society service and for web use statistics.
- studying consumer habits;
- collection of sales statistics.
The online shop sends the buyer newsletters and sends offers to the buyer’s e-mail address only if the buyer has expressed such a request by entering their e-mail address on the website and has consented to receive direct marketing messages.
The buyer can always decline future offers and newsletters sent by e-mail, notifying us thereof by e-mail or following the instructions in an e-mail containing an offer.
Legal basis
Personal data are processed for the purpose of performing a contract entered into with the customer.
Personal data are processed for performing legal obligations (such as accounting and the resolution of consumer complaints).
Recipients of personal data
Personal data is forwarded to the customer support of the online store to manage purchases and purchase history and to resolve any problems that customers may have.
The name, telephone number, e-mail address and delivery address are transmitted to the transport service provider.
Personal data may be transmitted to IT service providers if this is necessary to ensure the functionality of the online shop or to host data.
Orkla Eesti AS is the controller of personal data and transmits the personal data necessary for making payments to the processor, Maksekeskus AS.
The newsletter service provider with whom a contract for secure data processing has been entered into.
Security and access to data
Personal data is stored in the servers, which are located on the territory of a member state of the European Union or states of the European Economic Area. Data may be transferred to countries whose data protection levels have been assessed as adequate by the European Commission and to companies in the United States that have joined the Privacy Shield framework.
The staff of the online store has access to personal data in order to resolve technical issues related to the use of the online store and to provide customer support.
The online store takes appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Personal data are transmitted to the data processors of the online store (such as the providers of transport and data hosting services) and processed under contracts concluded between the online store and the processors. The processors must ensure appropriate safeguards when processing personal data.
Access to and rectification of personal data
Personal data can be accessed via customer support.
Withdrawal of consent
If personal data are processed on the basis of the customer’s consent, the customer has the right to withdraw the consent by informing customer support about this via e-mail.
Retention
Purchase history is retained in the online shop for up to 12 months.
In the event of disputes concerning payments and consumer disputes, the personal data are retained until the claim is satisfied or until the expiry of the limitation period.
Personal data needed for accounting purposes are retained for seven years.