Privacy Policy
PROCESSING OF PERSONAL DATA
The data controller of personal data for the online store Uncle Paul Shoes is ALINEKS OÜ (registration code 10422848), located at Nurme tn 2, Nõmme, Tallinn 11616, phone +372 505 70 70, and email paul@newbalance.ee.
Types of personal data processed:
− Name, phone number, and email address;
− Delivery address;
− Bank account number;
− Information related to the cost of goods and services and payments (purchase history);
− Customer support information.
Purpose of processing personal data:
Personal data is used to manage customer orders and deliver goods.
Purchase history data (purchase date, item, quantity, customer details) is used to provide an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used to refund payments to the customer.
Personal data such as email, phone number, and customer name is processed to resolve issues related to the provision of goods and services (customer support).
The IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and for web usage statistics.
Legal basis:
The processing of personal data is carried out for the purpose of fulfilling a contract with the customer.
The processing of personal data is carried out to fulfill a legal obligation (e.g., accounting and resolution of consumer disputes).
Recipients of personal data:
Personal data is transferred to the online store’s customer support to manage purchases and purchase history and to resolve customer issues.
The name, phone number, and email address are transferred to the transport service provider chosen by the customer. If the goods are delivered by courier, the customer’s address is also provided in addition to contact details.
If the online store’s accounting is carried out by a service provider, personal data is transferred to the service provider for accounting purposes.
Personal data may be transferred to IT service providers if necessary to ensure the functionality or data hosting of the online store.
Security and access to data:
Personal data is stored on servers located in a member state of the European Union or countries that have joined the European Economic Area. Data may be transferred to countries that the European Commission has deemed to have an adequate level of data protection, and to US companies that have joined the Privacy Shield framework.
Access to personal data is restricted to the online store’s employees who need access to resolve technical issues related to the use of the online store and to provide customer support services.
The online store implements appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure.
The transfer of personal data to authorized processors of the online store (e.g., transport service providers and data hosting) is based on contracts between the online store and the authorized processors. Authorized processors are required to ensure appropriate safeguards when processing personal data.
Alineks OÜ is the data controller of personal data, and Alineks OÜ transfers personal data necessary for making payments to the authorized processor Maksekeskus AS.
Access and correction of personal data:
Personal data can be accessed and corrected in the user profile of the online store. If a purchase is made without a user account, personal data can be accessed via customer support.
Withdrawal of consent:
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw their consent by notifying customer support via email.
Retention:
Upon closure of the online store customer account, personal data is deleted, except where such data needs to be retained for accounting purposes or for the resolution of consumer disputes.
If a purchase is made in the online store without a customer account, the purchase history is retained for three years.
In the event of disputes related to payments and consumer disputes, personal data is retained until the claim is fulfilled or the expiration period ends.
Personal data necessary for accounting purposes is retained for seven years.
Deletion:
To delete personal data, contact customer support via email. The deletion request will be responded to no later than within a month, specifying the data deletion period.
Transfer:
Requests for the transfer of personal data submitted by email will be responded to within a month. Customer support will verify the identity of the requester and inform about the personal data to be transferred.
Direct marketing messages:
Email address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, they can select the appropriate link in the email footer or contact customer support.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object to the initial and further processing of their personal data, including profiling related to direct marketing, at any time by notifying customer support via email (this information must be provided clearly and separately from any other information).
Dispute resolution:
Disputes related to the processing of personal data are resolved through customer support (annamariavalliveere@gmail.com / +372 52 82 753). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).