Processing of personal data
The data controller of the e-shop depile.ee, tervisilu.ee is Depilé, registration code 10255511, address Aardla tn 23a Tartu, Tartu, Tartu county 50110, telephone 6150 560 and e-mail info@depile.ee (hereinafter referred to as the "Merchant").
What personal data are processed
Name;
contact information, such as telephone number and e-mail address;
payer and delivery address;
bank account number;
the cost of goods and services and payment details (purchase history);
customer support details;
other information related to customer surveys and/or offers.
You can read more about the use and storage of cookies here.
Purposes for which personal data are processed
The processing of personal data is carried out for the purposes of the performance of a contract with a customer. Processing of personal data for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).
Personal data is used for the management of customer orders and the delivery of goods.
Purchase history data (date of purchase, goods, quantity, customer details) are used to compile an overview of goods and services purchased and to analyse customer preferences.
The bank account number is used to return payments to the customer.
Personal data, such as e-mail address, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support).
The IP address of the e-shop user or other network identifiers are processed for the purpose of providing the e-shop as an information society service and for the purpose of web usage statistics.
Transfer of personal data to processors
The merchant shall keep confidential the personal data of the customer which it has obtained in the course of registering and using the user account and shall disclose them to third parties only with the customer's consent, except where the obligation or right to disclose the data arises from legislation. The user of the e-shop agrees that the trader has the right to process his/her personal data in order to provide the customer with the appropriate services, including the transmission of the customer's data to persons connected with the provision of the service by the trader to the customer. List of data processors:
Google - Personal data (IP, browser, operating system and other network identifiers) is collected for statistical and analytical purposes in order to improve the e-shop user experience and technical solution.
Mailchimp - Personal data is transferred to the e-shop newsletter provider for direct marketing purposes and only with the customer's consent.
Payment Centre - One-stop-shop for all banking transactions - Personal data is transferred to the payment service provider of the customer's choice for the purpose of storing information necessary for transactions.
Paypal - Personal data are transmitted to the payment service provider of the customer's choice for the purpose of recording the information necessary for transactions.
Omniva - Personal data (name, telephone number and e-mail address) will be transmitted to the transport service provider of the customer's choice. In the case of goods to be delivered by courier, the customer's address is transmitted in addition to the contact details.
Swedbank - Personal data will be transmitted to the payment service provider of the customer's choice in connection with the storage of information necessary for transactions.
SEB - Personal data will be transmitted to the payment service provider of the customer's choice in connection with the recording of information necessary for transactions.
LHV - Personal data will be transferred to the payment service provider of the customer's choice in connection with the recording of information necessary for transactions.
Luminor - Personal data will be transferred to the payment service provider of the customer's choice in connection with the recording of information necessary for transactions.
Danske Bank - Personal data are transferred to the payment service provider of the customer's choice in connection with the recording of information necessary for the transactions.
COOP - Personal data are transferred to the payment service provider of the customer's choice in connection with the recording of information necessary for transactions.
Pocopay - Personal data are transferred to the payment service provider of the customer's choice in connection with the recording of information necessary for transactions.
Security and data access
Personal data is stored on servers of Zone Media OÜ located in the territory of a Member State of the European Union or a country that is a member of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States that have signed up to the Privacy Shield framework.
The e-shop implements appropriate physical, organisational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Transfers of personal data to processors of the e-shop - The processing of personal data is carried out on the basis of contracts concluded between the e-shop and processors. The processors are obliged to ensure appropriate safeguards when processing personal data.
Access and rectification of personal data
Personal data stored in the e-shop can be accessed and corrected in the e-shop account management. If a purchase is made as a guest (without a user account), the personal data can be requested via the data request form.
Withdrawing consent
If the processing of personal data is based on the consent of the customer, the customer has the right to withdraw the consent in the e-shop account management.
Retention
Personal data will be deleted upon closure of the e-shop customer account, except where such data need to be kept for accounting purposes or to resolve consumer disputes.
If a purchase has been made in the e-shop by a third party (without a user account), the personalised purchase history will be kept for three years.
In the case of disputes relating to payments and consumer disputes, personal data will be retained until the claim is settled or the limitation period expires (three years).
Personal data necessary for accounting purposes are kept for seven years.
Deletion
Personal data stored in the e-shop together with the user account can be deleted in the e-shop account management.
You can request the deletion of other personal data using the data request form. A request for deletion of data will be answered within one month at the latest and, if necessary, the period of deletion will be specified.
Transfer to
You can download an electronic extract of the personal data stored in the e-shop from the e-shop account management.
For other transfers of personal data, you can submit a request using the data request form. A request for data transfer will be answered within a period of no more than one month, where customer support will verify the identity and inform you of the personal data to be transferred.
Direct marketing communications
The e-mail address and telephone number will be used to send direct marketing communications where the customer has given his consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the header of the e-mail or contact customer support.
Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his or her personal data, including profiling in relation to direct marketing, by informing customer support by e-mail.
Dispute resolution
Dispute resolution in relation to the processing of personal data is provided through Customer Support (info@depile.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).