Conditions for processing personal data

Conditions for processing personal data

The controller of personal data of the online store Infralink.ee is Infralink OÜ, registry code 14381036, address Tapri tn 5 warehouse no. 7, Tallinn, telephone 50 700 66 and e-mail info@infralink.ee (hereinafter referred to as the "merchant").

What kind of personal data is processed

• name;
• contact information, such as phone number and email address;
• payer and delivery address;
• phone number;
• cost of goods and services and payment-related data (purchase history);
• customer support data;
• other information related to customer surveys and/or offers.

You can read more about the use and storage of cookies on this page  (link). 

What is the purpose of processing personal data?

Personal data is processed for the purpose of fulfilling the contract concluded with the customer. The processing of personal data is carried out to fulfill a legal obligation (e.g. accounting and resolving consumer disputes).
Personal data is used to manage customer orders and deliver goods.
Purchase history data (purchase date, product, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used to refund payments to the customer.
Personal data such as email address, telephone number, and customer name are processed to resolve issues related to the provision of goods and services (customer support).
The IP address or other network identifiers of the e-shop user are processed to provide the e-shop as an information society service and to produce web usage statistics.

Personal data: transfer to authorized processors

The merchant keeps the customer's personal data, which has become known to them during the registration and use of the user account, confidential and discloses it to third parties only with the customer's consent, unless the obligation or right to disclose the data arises from legislation. The e-store user agrees that the merchant has the right to process the customer's data in order to provide suitable services to the customer, including transferring the customer's data to persons who are involved in the merchant's provision of services to the customer. List of authorized processors:

• Erply (for order and invoice management and fulfillment)
• Google Analytics (for tracking website traffic statistics)
• DPD (for delivery service)
• Zone Media OÜ (website and data hosting)
• OYE Network OÜ (for providing website development and maintenance services)

 

Security and data access

Personal data is stored on Zone Media OÜ servers located in the territory of a member state of the European Union or a country that has joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed by the European Commission as adequate and to US companies that have joined the Privacy Shield framework.

The Online store implements appropriate physical, organizational and information technology security measures to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.

Transfer of personal data to authorized processors of the Online store - personal data is processed on the basis of agreements concluded with the Online store and authorized processors. Processors are required to ensure appropriate safeguards when processing personal data.

Access and correction of personal data

You can view and make corrections to the personal data stored in the Online store in the Online store's account management  (link). If the purchase was made as a guest (without a user account), a request for personal data can be submitted using the data request form (link). 

Withdrawal of consent

If the processing of personal data is based on the customer's consent, the customer has the right to withdraw consent in the Online store's account management  (link). 

Storage

When closing an Online store customer account, personal data will be deleted, unless such data needs to be retained for accounting purposes or to resolve consumer disputes.

If a purchase is made in the Online store as a guest (without a user account), the personalized purchase history is retained for three years.

In the case of disputes related to payments and consumer disputes, personal data will be retained until the claim is satisfied or the statute of limitations expires (three years).

Personal data necessary for accounting purposes will be retained for seven years.

Deletion

Personal data stored in the Online store, along with the user account, can be deleted in the Online store's account management (link).

You can submit a request for the deletion of other personal data through the data request form. (link). 

A request for data deletion will be responded to no later than within a month and, if necessary, the period for data deletion will be specified.

Transfer

You can download an electronic extract of the personal data stored in the Online store in the Online store's account management  (link). 

You can submit a request for deletion of other personal data using the data request form  (link). 

A request for data transfer will be responded to no later than within a month, during which customer support will verify the identity of the person and inform them of the personal data applicable to the transfer.

Direct marketing communications

The email address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, they must select the appropriate link in the email header or contact customer support.

If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by informing customer support by e-mail.

Settlement of disputes

Disputes related to the processing of personal data are resolved through customer support (merchant's customer support contact information). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).