PRIVAATSUSTINGIMUSED
Processing of Personal Data
1.1 The responsible processor of personal data for the online store tellimus.sigly.ee is Sigly OÜ (registry code 17112789), located at Harju county, Tallinn, Kristiine district, Liimi tn 6/2, 10621, phone: +372 5806 3382, and email: info@sigly.ee.
What Personal Data Is Processed
2.1. name, phone number, and email address;
2.2. delivery address for goods;
2.3. bank account number;
2.4. cost of goods and services and related payment information (purchase history);
2.5. customer support information.
The Purpose of Processing Personal Data
3.1. Personal data is used for managing Customer Orders and delivering goods.
3.2. Purchase history data (purchase date, goods, quantity, Customer data) is used to compile an overview of purchased goods and services and analyze customer preferences.
3.3. The bank account number is used to refund payments to the Customer.
3.4. Personal data such as email, phone number, Customer name, are processed to resolve issues related to the provision of goods and services (customer support).
3.5. The IP address or other network identifiers of the online store user are processed as part of providing information society services and for generating web usage statistics.
Legal Basis
4.1. The processing of personal data is carried out for the purpose of fulfilling an Order entered into with the Customer.
4.2. The processing of personal data is carried out to fulfill a legal obligation (e.g., accounting and resolving consumer disputes).
Recipients to Whom Personal Data Is Transferred
5.1. Personal data is transferred to the online store's customer support to manage purchases and purchase history and solve customer issues.
5.2. Name, phone number, and email address are transferred to the transport service provider for delivering goods.
5.3. If the online store's accounting is carried out by a service provider, personal data is transferred to the service provider for accounting operations.
5.4. Sigly OÜ is the responsible processor of personal data, Sigly OÜ transfers necessary personal data for making payments to the authorized processor Maksekeskus AS.
5.5. Personal data may be transferred to IT service providers if necessary for ensuring the functionality or data hosting of the online store.
Security and Access to Data
6.1. Personal data is stored on Veebimajutus.ee OÜ servers, located within the territory of a European Union member state or countries affiliated with the European Economic Area. Data may be transferred to countries whose data protection levels have been deemed adequate by the European Commission and to US companies that have joined the Privacy Shield framework.
6.2. Access to personal data is given to employees of the online store who can access personal data to resolve technical issues related to the use of the online store and provide customer support service.
6.3. The online store implements appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure.
6.4. The transfer of personal data to authorized processors of the online store (e.g., transport service provider and data hosting) is based on contracts concluded with the online store and authorized processors. Authorized processors are required to ensure appropriate protection measures when processing personal data.
Accessing and Correcting Personal Data
7.1. Personal data can be accessed and corrections made in the online store's user profile. If a purchase is made without a user account, personal data can be accessed through customer support.
Withdrawing Consent
8.1. If the processing of personal data is based on the Customer's consent, the Customer has the right to withdraw consent by notifying customer support via email.
Retention
9.1. Upon closing an online store customer account, personal data is deleted, except when such data needs to be retained for accounting purposes or resolving consumer disputes.
9.2. If a purchase in the online store is made without a customer account, purchase history is retained for three years.
9.3. In case of disputes related to payments and consumer disputes, personal data is retained until the claim is fulfilled or the expiration period ends.
9.4. Personal data necessary for accounting purposes is retained for seven years.
Deletion
10.1. To delete personal data, contact customer support via email at info@sigly.ee. Responses to deletion requests will be provided no later than one month, specifying the period of data deletion.
Transfer
11.1. Responses to requests for transferring personal data submitted via email will be provided no later than one month. Customer support will verify the identity of the person and inform about the personal data to be transferred.
Direct Marketing Messages
12.1. The email address and phone number