Privacy Policy

Privacy Policy

USE OF COOKIES

The online store uses cookies. A cookie is a small text file that the web browser automatically saves to the device used by the customer. Cookies are used to collect information about how the customer uses the online store, with the aim of providing the customer with a better user experience.

The online store uses the following cookies:

  • session cookies, which are intended to enable the use of the Online Store;
  • persistent cookies, which are used to remember a customer's preferences in the online store;
  • first-party and/or third-party cookies, which are used to display relevant advertisements and offers to the customer;
  • third-party analytics cookies, which are used to optimize marketing communications.

Customers may delete and/or block cookies stored on their devices by changing the relevant settings in their web browser. If cookies are not used, the Online Store may not function as intended, and/or certain features may not be available to the customer.

In addition to using analytics cookies, the Online Store uses pixel tags (web beacons) to track usage of the seller’s website. No personally identifiable information is processed in this process.

PROCESSING OF PERSONAL DATA

The data controller for personal data at the Shoppa24.ee online store is Shoppa24.ee, Stuffinstock OÜ (registration code 16366522), located at Tuule tee 7, Ilmandu, 76904 Harku Municipality, Harju County, Estonia, email info@shoppa24.ee.

WHAT KIND OF PERSONAL DATA IS PROCESSED

  • name, phone number, and email address;
  • delivery address;
  • bank account number;
  • the cost of goods and services and payment-related information (purchase history);
  • Customer support information.

FOR WHAT PURPOSE IS PERSONAL DATA PROCESSED?

Personal data is used to manage customer orders and deliver goods.

Purchase history data (purchase date, item, quantity, customer information) is used to compile an overview of purchased goods and services and to analyze customer preferences.

The bank account number is used to refund payments to the customer.

Personal data such as email address, phone number, and customer name are processed in order to resolve issues related to the provision of goods and services (customer support).

The IP address or other network identifiers of online store users are processed for the purpose of providing the online store’s information society services and compiling web usage statistics.

LEGAL BASIS

Personal data is processed for the purpose of fulfilling the contract entered into with the customer.

Personal data is processed to comply with a legal obligation (e.g., accounting and the resolution of consumer disputes).

RECIPIENTS TO WHOM PERSONAL DATA IS DISCLOSED

Personal data is shared with the online store's customer support team to manage purchases and purchase history and to resolve customer issues.

The customer's name, phone number, and email address are forwarded to the shipping provider selected by the customer. If the goods are to be delivered by courier, the customer's address is also forwarded in addition to the contact information.

The online store's accounting is handled by the service provider. Personal data is provided to the service provider for the purpose of performing accounting tasks.

Personal data may be disclosed to information technology service providers if necessary to ensure the functionality of the online store or data hosting.

SECURITY AND DATA ACCESS

Personal data is stored on ShopRoller.com servers located within the territory of a member state of the European Union or a country that is part of the European Economic Area. Data may be transferred to countries whose level of data protection has been deemed adequate by the European Commission, as well as to U.S. companies that have joined the Privacy Shield framework.

Access to personal data is granted to online store employees, who may view such data in order to resolve technical issues related to the use of the online store and to provide customer support.

The online store implements appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.

The transfer of personal data to the online store’s authorized processors (e.g., shipping service providers and data hosting providers) is carried out in accordance with agreements concluded between the online store and the authorized processors. Authorized processors are required to ensure appropriate safeguards when processing personal data.

ACCESSING AND CORRECTING PERSONAL DATA

You can view and edit your personal information in your online store user profile. If you made a purchase without creating a user account, you can view your personal information by contacting customer support.

WITHDRAWAL OF CONSENT

If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw that consent by notifying customer support via email.

STORAGE

When an online store customer account is closed, personal data will be deleted, unless such data needs to be retained for accounting purposes or to resolve consumer disputes.

If a purchase is made in the online store without a customer account, the purchase history is retained for three years.

In the case of disputes related to payments and consumer disputes, personal data will be retained until the claim is settled or the statute of limitations expires.

Personal data required for accounting purposes is retained for seven years.

DELETION

To have your personal data deleted, please contact customer support via email. We will respond to your deletion request within one month at the latest and specify the timeframe for deleting the data.

TRANSFER

Requests for the transfer of personal data submitted via email will be responded to within one month at the latest. Customer support will verify the individual’s identity and provide information about the personal data to be transferred.

DIRECT MARKETING ANNOUNCEMENTS

The email address and phone number are used to send direct marketing messages if the customer has given their consent. If a customer does not wish to receive direct marketing messages, they should click the appropriate link in the email footer or contact customer support.

If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support via email.

DISPUTE RESOLUTION

Disputes related to the processing of personal data are resolved through customer support at info@shoppa24.ee. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).