PROCESSING OF PERSONAL DATA

The controller of personal data of the Trampolino online store is Reds OÜ (registration code 12106028), located at Pärnu mnt 139d, 11317 Tallinn, tel. +372 5376 5555 and e-mail info@trampolino.ee.

WHAT PERSONAL DATA WILL BE PROCESSED

− name, telephone number and e-mail address;
− cost of goods and services and payment-related data (purchase history);
− customer support data.

FOR WHAT PURPOSES WILL PERSONAL DATA BE PROCESSED

Personal data is used to manage customer orders. Purchase history data (purchase date, product, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences. Personal data such as e-mail, telephone number, customer name are processed in order to resolve issues related to the provision of goods and services (customer support). The IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and to compile web usage statistics.

LEGAL BASIS

The processing of personal data is carried out for the purpose of fulfilling the contract concluded with the customer. The processing of personal data is carried out to fulfill a legal obligation (e.g. accounting and resolving consumer disputes).

RECIPIENTS TO WHOM THE PERSONAL DATA IS TRANSFERRED

Personal data is transmitted to the online store’s customer support to manage purchases and purchase history and to resolve customer problems.

SECURITY AND DATA ACCESS

Personal data is stored on Reds OÜ servers located in a member state of the European Union or a country that has joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed by the European Commission as adequate and to US companies that have joined the Privacy Shield framework. Access to personal data is available to the online store’s employees, who can review the personal data in order to resolve technical issues related to the use of the online store and to provide customer support services. The online store implements appropriate physical, organizational and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure. The transfer of personal data to the online store’s authorized processors (e.g. data hosting) takes place on the basis of agreements concluded with the online store and authorized processors. Authorized processors are obliged to ensure appropriate protection measures when processing personal data.

WITHDRAWAL OF CONSENT

If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw the consent by notifying customer support by e-mail.

STORAGE

When closing the online store’s customer account, personal data will be deleted, unless such data needs to be stored for accounting purposes or to resolve consumer disputes. If a purchase is made in the online store without a customer account, the purchase history will be stored for three years. In the case of disputes related to payments and consumer disputes, personal data will be stored until the claim is satisfied or until the end of the limitation period. Personal data necessary for accounting will be stored for seven years.

DELETION

To delete personal data, you must contact customer support by e-mail. The deletion request will be responded to no later than within a month and the period for data deletion will be specified.

TRANSFER

A request for the transfer of personal data submitted by e-mail will be responded to no later than within a month. Customer support will verify the identity of the person and inform about the personal data that is subject to transfer.

DIRECT MARKETING MESSAGES

The e-mail address and phone number will be used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, they must select the appropriate link in the footer of the e-mail or contact customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profiling related to direct marketing, by informing customer support by e-mail (the relevant information must be provided clearly and separately from any other information).

DISPUTE RESOLUTION

Disputes related to the processing of personal data are resolved through customer support (CONTACT DETAILS). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).