Privacy Policy
The controller of the personal data of the online shop ubin.store is UBENS OÜ (registry code 17245303), located at Uuesepa, Muusika, 76309 Saue, Harju county, e-mail ubin.kofeiinipadi@gmail.com, phone +372 5561 2562.
Which personal data are processed?
– name, phone number and e-mail address;
– delivery address;
– bank account number;
– cost of goods and services and data related to payments (purchase history);
– customer support data;
– IP address.
For which purposes are personal data processed?
Personal data is used to manage the customer’s orders and to deliver goods. Purchase history data (date of purchase, goods, quantity, customer data) are used to put together an overview of the goods and services purchased, to analyse customer preferences and, among other things, for the purposes of resolving consumer disputes. The bank account number is used to reimburse payments to the customer. Personal data such as the e-mail address, telephone number and name of the customer are processed to handle any issues relating to the provision of goods and services (customer support). E-mail is also used in order to forward invoices and the telephone number is used to notify the customer about their goods arriving in the parcel locker. The IP address or other online identifiers of users of the online shop are processed for the provision of the online shop as an information society service and for web use statistics.
Legal basis
The purpose of processing personal data is to fulfil the agreement entered into with the customer (managing the customer’s orders, delivery, returning goods and reimbursing payments). Personal data are processed in order to fulfil legal obligations (e.g. for accounting). The processing of personal data, i.e. the collection of purchase history data for the purposes of resolving potential consumer disputes, is necessary due to the controller’s legitimate interest. The processing of data for statistical or marketing purposes is done on the basis of the user’s consent.
Recipients of personal data
Name, telephone number and e-mail address are forwarded to the transport service provider selected by the customer. If the goods are delivered by a courier, the customer’s contact details, as well as their address, are forwarded to the courier. To execute payments, the online shop forwards the necessary personal data to the authorized processor, Montonio Finance UAB. If an outside service provider handles the accounting for the online shop, the personal data is forwarded to that service provider to perform the accounting operations. Personal data is stored in the servers of Zone Media OÜ, which provides hosting services. Personal data may be forwarded to IT service providers (such as the developers or maintainers of the WordPress/WooCommerce platform) if this is needed to ensure the functionality of the online shop or to host data.
Security and access to data
Personal data are stored in the servers of Zone Media OÜ, which are located on the territory of a member state of the European Union or states of the European Economic Area. Data may be forwarded to states whose level of data protection is sufficient according to the European Commission or to a company of a third state to which a safeguard specified in articles 46 or 47 or in subsection 49 (1) of the GDPR has been applied. Personal data can be accessed by the staff of the online shop in order to resolve technical issues related to the use of the online shop and to provide customer support. The online shop applies the relevant physical, organisational and IT security measures in order to protect personal data from accidental or unlawful destruction, loss, amendment or unauthorised access and disclosure. Personal data are forwarded to processors (e.g. the transport service provider, data hosts, and payment processor) on the basis of contracts between the online shop and processors. Upon processing data, the processors are obliged to ensure the relevant safeguards in accordance with article 28 of the GDPR.
Access to and rectification of personal data
Personal data can be accessed and rectified via the online shop’s user profile or customer support. If a purchase is made without a user account, personal data can be accessed via customer support. If the request to access personal data has been submitted electronically, the information will also be provided via commonly used electronic means.
Withdrawal of consent
If personal data are processed with the customer’s consent, the customer has the right to withdraw their consent by notifying customer support via e-mail.
Storage
Personal data are erased upon deleting the online shop’s customer account, except for the personal data (purchase history) which are necessary for accounting or to resolve consumer disputes. In the event of disputes regarding payments and consumer disputes, personal data are stored until the claim is settled or the limitation period expires. The personal data in original accounting documents is stored for seven years.
Restriction
If the data are incorrect, incomplete or processed unlawfully, the customer has the right to request the restriction of the processing of their personal data.
Objections
The customer has the right to submit objections regarding the processing of their personal data if they have a reason to believe that there is no legal basis to process their personal data.
Erasure
For the erasure of personal data, customer support should be contacted by e-mail. Requests for erasure are responded to within one month and the period of erasure is specified. The response to the request will also indicate which personal data will not be erased, on which legal basis and why.
Transfer
Requests to transfer personal data submitted via e-mail are responded to within one month. Customer support identifies the person and indicates which personal data is to to be transferred.
Direct marketing messages
The e-mail address and telephone number are used to send direct marketing messages if the customer has consented to receiving such messages. If the customer does not wish to receive direct marketing messages, they should select the relevant link at the footer of the e-mail or contact customer support. Where personal data are processed for direct marketing purposes (profiling), the customer has the right to object at any time both to the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support thereof via e-mail.
Cookies
The online shop uses cookies. A cookie is a small text file that a web server sends to the user’s web browser, which is stored on the user’s hard drive. This allows the website to remember user preferences.
We use the following types of cookies:
- Essential (Functional) Cookies: These are necessary for the website to function. They are used, for example, to keep a user logged in and to remember the contents of their shopping cart. These cookies do not require user consent.
- Statistics (Analytics) Cookies: These cookies collect information about how visitors use the website (e.g., which pages are visited most). We use this data to improve the website’s functionality and user experience. We use these cookies (e.g., Google Analytics) only with your explicit consent.
- Marketing Cookies: These cookies are used to track visitors across websites to display ads that are relevant and engaging for the individual user (e.g., via Google or Facebook). We use these cookies only with your explicit consent.
The user can manage and/or delete cookies stored on their device. Most web browsers can be set to block cookies. You can also manage your consent for statistics and marketing cookies via the cookie consent banner on our website. Please note that if you block essential cookies, the online shop may not function properly (e.g., you may not be able to add items to your cart).
Resolution of disputes
Disputes concerning the processing of personal data are settled through customer support (ubin.kofeiinipadi@gmail.com or +372 5561 2562). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).