Privacy Policy

The controller of the personal data of the online shop is Poemees OÜ (registry code 16695582), located at Ilmatsalu tn 5, 50412 Tartu linn, Tartu maakond, phone +372 5557 5698 and e-mail in**@******ds.group. Poemees OÜ transmits the personal data for making payments to the authorized processor.

Which personal data are processed?

– name, phone number and e-mail address;
– delivery address;
– bank account number;
– cost of goods and services and data related to payments (purchase history);
– customer support data;
– IP address.

For which purposes are personal data processed?

Personal data is used to manage the customer’s orders and to deliver goods.

Purchase history data (date of purchase, goods, quantity, customer data) are used to put together  an overview of the goods and services purchased, to analyse customer preferences and, among  other things, for the purposes of resolving consumer disputes.

The bank account number is used to reimburse payments to the customer.

Personal data such as the e-mail address, telephone number and name of the customer are  processed to handle any issues relating to the provision of goods and services (customer support).  E-mail is also used in order to forward invoices and the telephone number is used to notify the  customer about their goods arriving in the parcel locker.

The IP address or other online identifiers of users of the online shop are processed for the provision  of the online shop as an information society service and for web use statistics.

Legal basis

The purpose of processing personal data is to fulfil the agreement entered into with the customer  (managing the customer’s orders, delivery, returning goods and reimbursing payments).

Personal data are processed in order to fulfil legal obligations (e.g. for accounting).

The processing of personal data, i.e. the collection of purchase history data for the purposes of  resolving potential consumer disputes, is necessary due to the controller’s legitimate interest.

Recipients of personal data

Name, telephone number and e-mail address are forwarded to the transport service provider  selected by the customer. If the goods are delivered by a courier, the customer’s contact details, as  well as their address, are forwarded to the courier.

If an outside service provider handles the accounting for the online shop, the personal data is  forwarded to that service provider to perform the accounting operations.

Personal data may be forwarded to IT service providers if this is needed to ensure the functionality  of the online shop or to host data.

Security and access to data 

Personal data are stored in the servers of Radicenter OÜ, which are located on the territory of a member state  of the European Union or states of the European Economic Area. Data may be forwarded to states whose level of data protection is sufficient according to the European Commission or to a company  of a third state to which a safeguard specified in articles 46 or 47 or in subsection 49 (1) of the  GDPR has been applied.

Personal data can be accessed by the staff of the online shop in order to resolve technical issues  related to the use of the online shop and to provide customer support.

The online shop applies the relevant physical, organisational and IT security measures in order to  protect personal data from accidental or unlawful destruction, loss, amendment or unauthorised  access and disclosure.

Personal data are forwarded to processors (e.g. the transport service provider and data hosts) on  the basis of contracts between the online shop and processors. Upon processing data, the processors  are obliged to ensure the relevant safeguards in accordance with article 28 of the GDPR.

Access to and rectification of personal data

Personal data can be accessed and rectified via the online shop’s user profile or customer support.  If a purchase is made without a user account, personal data can be accessed via customer support.  If the request to access personal data has been submitted electronically, the information will also  be provided via commonly used electronic means.

Withdrawal of consent

If personal data are processed with the customer’s consent, the customer has the right to withdraw  their consent by making relevant changes in the user account’s settings or by notifying customer  support via e-mail.

Storage

Personal data are erased upon deleting the online shop’s customer account, except for the personal  data (purchase history) which are necessary for accounting or to resolve consumer disputes.

In the event of disputes regarding payments and consumer disputes, personal data are stored until  the claim is settled or the limitation period expires.

The personal data in original accounting documents is stored for seven years.

Restriction

If the data are incorrect, incomplete or processed unlawfully, the customer has the right to request  the restriction of the processing of their personal data.

Objections 

The customer has the right to submit objections regarding the processing of their personal data if  they have a reason to believe that there is no legal basis to process their personal data.

Erasure

For the erasure of personal data, customer support should be contacted by e-mail. Requests for  erasure are responded to within one month and the period of erasure is specified. The response to  the request will also indicate which personal data will not be erased, on which legal basis and why.

Transfer

Requests to transfer personal data submitted via e-mail are responded to within one month.  Customer support identifies the person and indicates which personal data is to be transferred.

Direct marketing messages

The e-mail address and telephone number are used to send direct marketing messages if the  customer has consented to receiving such messages. If the customer does not wish to receive direct  marketing messages, they should select the relevant link at the footer of the e-mail or contact  customer support.

Where personal data are processed for direct marketing purposes (profiling), the customer has the  right to object at any time both to the initial and further processing of their personal data, including  profiling related to direct marketing, by notifying customer support thereof via e-mail.

Resolution of disputes

Disputes concerning the processing of personal data are settled through customer support (phone +372 5557 5698 and e-mail in**@******ds.group). The supervisory authority is the Estonian Data Protection Inspectorate  (in**@*ki.ee). Website address is: https://thegoods.group.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.