PERSONAL DATA PROCESSING

Responsible for processing personal data of the online store’s clients at Retrodisc is MTÜ TDM 2000 Estonia (registry code 80262754) address Anne 47-31, tel. +37255596747 and e-mail erkki@retrodisko.ee.

What kind of personal data will be processed

• Name, mobile number and e-mail address;
• Goods delivery address;
• Bank account number;
• Price of goods and services and data related to payments (purchase history);

Purpose of processing personal data

Personal data is used for order management and delivery of goods.

Purchase history data (date of purchase, merchandise, quantity, client information) is used to review purchased goods and services in order to analyze client’s preferences.

Bank account number is used for refunding.

Personal data like e-mail, mobile number and name is processed in order to resolve questions regarding goods and services (customer support).

The IP address or other network identifiers of the online store users are processed to compile online usage statistics.

Legal basis

Personal data processing is done for the purpose of fulfilling the contract made with the client.

Personal data processing will be made in order to fulfill legal obligations (accounting and resolution of consumer disputes).

Receivers of personal data

Personal data is forwarded to the online store’s customer support for managing purchases and purchase history and solving problems.

Name, mobile number and e-mail address are forwarded to a transportation service of the client’s choosing. If client has chosen a courier door service, then in addition to the client’s contact information their address is also forwarded.

If the online store’s accounting is made by a private service, then personal data is forwarded to the service.

Personal data may be forwarded to info technology service providers if it is necessary for online store’s functionality or to ensure data hosting.

Security and data accessibility 

Personal data is kept in MakeCommerce servers, that are located in a European Union member country or in a European Union member country economic area territories. Data may be transferred to countries whose data security level has been rated and proved by the European Committee, also to private USA companies who have joined the data protection shield (Privacy Shield) frameworks.

Access to personal data is granted to online store employees who can familiarize with said data in order to answer technical questions about the online store and offer customer support.

Online store uses appropriate physical, organizational and technological security means to protect personal data from accidental or unlawful destruction, misplacement, modification or unauthorized access and disclosure.

Forwarding personal data to authorized store employees (courier service and data hosting) and authorized processors is made under a signed contract. Authorized processors are obliged to ensure necessary defensive measures.

Familiarization of personal data and correction

Personal data can be accessed and corrected, if need be, from the online store’s profile. If purchase has been made without an account, then personal data can be accessed through customer support.

Confirmation withdrawal

If processing of personal data is made under the confirmation from the client then client retains the right to withdraw the confirmation by contacting customer support through e-mail.

Preservation

Upon closing your account, personal data will be erased unless the data is needed for accounting or resolving a consumer dispute.

If a purchase is made without an account the purchase history will be preserved for three years.

Personal data will be preserved until the disputes containing payments and/or consumer dispute claims have been resolved or have become time-barred.

Personal data needed for accounting will be preserved for seven years.

Deleting of data

In order to delete personal data it is required to contact customer support through e-mail. Application for deletion will be responded within one month upon receiving and the deletion period will be specified with the response.

Transferring data

Application for personal data transfer presented through e-mail will be responded within one month. Customer support will confirm the identity and announces the personal data up for transfer.

Direct marketing

E-mail address and mobile number is used to send direct marketing announcements if the client has given their consent. If the client does not wish to receive direct marketing announcements then specific reference needs to be chosen at the foot of the e-mail or through contact with the customer support.

If personal data is being processed for direct marketing announcements (profiling), client retains the right to their personal data current or processed and can at any time withdraw all through contacting customer support by e-mail.

Resolving disputes

Disputes containing processing of personal data will be conducted through customer support (erkki@retrodisko.ee, +37255596747). Supervised by Estonian Data Protection Inspectorate (info@aki.ee).