PERSONAL DATA PROCESSING
The WEBBER OU personal data processor is LUREX.EE (reg. N 12676145), located at Õpetajate 14-50, Kohtla-Järve, Ida-Virumaa, 31021, telephone +372 55 580 545 and e-mail info@lurex.ee. The processor appointed a data protection officer whose contact details are +372 55 580 545 and e-mail info@lurex.ee
What personal data is processed
– Name, phone number and email address,
– Delivery address;
– Bank account number;
– The cost of goods and services and payment information (purchase history);
– Customer support information.
Purpose for which personal data is processed
Personal information is used to manage customer orders and deliver goods.
Purchase history data (purchase date, position, quantity, customer information) is used to compile an overview of purchased goods and services and analyze customer preferences.
Bank account number is used to return payments to the customer.
Personal information, such as email, phone number, customer name, is processed to resolve issues related to goods and services (customer support).
The users IP address of the online store or other network identifiers is processed by the online store to provide information society services and statistics on network use.
Legal basis
Personal data is processed in order to fulfill the contract with the client.
The processing of personal data occurs in order to fulfill a legal obligation (for example, accounting and settlement of consumer disputes).
Data processing is carried out with the consent of the client for the following actions: marketing, notification of new products and campaigns of interest to the client.
Recipients to whom personal data is transmitted
Personal information is transmitted to the customer support service of the online store to manage purchases and purchase history, as well as to solve customer problems.
The name, phone number and email address will be sent to the transport provider of your choice. In the case of goods delivered by courier, the buyer’s address must be indicated in addition to the online information.
If the online store is served by a service provider, personal data will be transferred to the service provider for accounting purposes.
Personal information may be shared with information technology service providers if necessary to ensure the functionality of an online store or data hosting.
Security and Data Access
Personal data is stored on Zone Media OÜ servers located in the territory of a Member State of the European Union or countries that have entered the European Economic Area. Data can be transferred to countries that have been assessed by the European Commission as having an adequate level of data protection, and to American companies that are associated with the Privacy Shield structure.
Access to personal information is available to employees of the online store, who can access personal information to solve technical issues related to the use of the online store, and to support customers. The online store implements appropriate measures of physical, organizational and information security to protect personal information from accidental or illegal destruction, loss, alteration or unauthorized access and disclosure.
The transfer of personal data to trusted processors of the online store (for example, a transport service provider and data hosting) is governed by agreements with the online store and trusted processors. Processors are required to provide appropriate guarantees for the processing of personal data.
Webber OÜ is the processor of personal data and transfers the personal data necessary for making payments to the authorized processor of Maksekeskus AS.
Access and correction of personal data
You can familiarize yourself with personal data and make changes to the profile of the online store. If the purchase is made without a user account, access to personal information can be obtained through the support service.
Revocation of consent
If personal data is processed with the consent of the client, the client has the right to withdraw consent by notifying the support service by e-mail.
Retention
Closing the customer account of the online store will lead to the removal of personal information, unless there is a need to save such data for accounting purposes or to resolve disputes with consumers.
If the purchase is made without a customer account in the online store, the purchase history is stored for three years.
In the case of disputes regarding payments and consumer disputes, personal data is stored until the claim is satisfied or until the expiration of the limitation period.
Personal data necessary for accounting purposes is stored for seven years.
Delete
You must contact support by e-mail to delete your personal information. The deletion request must be answered within no more than one month, and the period for deletion must be indicated.
Broadcast
Requests for the transfer of personal data by e-mail must be answered within a maximum of one month.
The support service identifies and informs you of the personal data to be transmitted.
Marketing messages
The email address and telephone number will be used to send marketing messages subject to the consent of the client. If the client does not want to receive marketing notifications, select the appropriate link on the bottom line of the email or contact customer support.
If personal data is processed for marketing purposes (profiling), the client has the right at any time to object to the initial and further processing of his personal data, including profiling analysis related to direct marketing, by notifying the support service by e-mail.
Dispute Resolution
Disputes related to the processing of personal data are resolved through the support service (info@lurex.ee). The supervisor is the Estonian Data Protection Inspectorate (info@aki.ee).