PERSONAL DATA PROCESSING
The personal data controller of the website halk.ee is Haabersti Loomakliinik OÜ (registry code 11258138), located in Tartu mnt 14 Tallinn Harjumaa 10117, phone 6593160 and e-mail haabersti.vetkeskus@gmail.com.
What personal data is processed
- name, telephone number and e-mail address;
- the delivery address of the goods or the location of the parcel machine;
- Bank account number;
- cost of goods and services and data related to payments (purchase history);
- customer support details;
For what purpose is personal data processed
Personal data is used to manage customer orders and deliver goods.
Purchase history data (date of purchase, service or product, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used to return payments to the customer.
Personal data such as e-mail, phone number, customer name are processed in order to solve issues related to the provision of goods and services (customer support).
The website user’s IP address or other network identifiers are processed for the provision of the website as an information society service and for making web usage statistics.
Legal basis
Personal data is processed for the purpose of fulfilling the contract concluded with the customer.
Personal data is processed to fulfill a legal obligation (e.g. accounting and consumer dispute resolution).
Recipients to whom personal data is transferred
Personal data is transferred to the customer support of the website to manage purchases and purchase history and to solve customer problems.
The name and phone number are transmitted to the transport service provider chosen by the customer. If the goods are delivered by courier, in addition to the contact details, the customer’s address or specified location is also transmitted.
If the accounting of the website is carried out by the service provider, personal data will be transferred to the service provider for accounting operations.
Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality of the website or data hosting.
Security and data access
Personal data is stored on servers located in the territory of a member state of the European Union or countries that have joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to US companies that are affiliated with the Privacy Shield framework.
Website employees have access to personal data, who can access personal data in order to solve technical issues related to the use of the website and to provide customer support services.
The website implements appropriate physical, organizational and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.
Transfer of personal data to Inspira’s authorized processors (e.g. transport service provider and data hosting) processing of personal data is carried out on the basis of contracts concluded with Inspira and authorized processors. Authorized processors are obliged to ensure appropriate protection measures when processing personal data.
Withdrawal of consent
If the processing of personal data takes place on the basis of the customer’s consent, the customer has the right to withdraw the consent by notifying the customer support by e-mail.
Storage
Customer data and purchase history are stored for three years.
In case of disputes related to payments and consumer disputes, personal data will be stored until the claim is fulfilled or until the end of the statute of limitations (three years).
Personal data necessary for accounting are stored for seven years.
Erasure
To delete personal data, you must contact customer support by e-mail. The deletion request will be answered no later than within a month, and the data deletion period will be specified.
Transfer
The transfer request submitted by e-mail will be answered within a month at the latest. Customer support identifies the identity and informs about the personal data applicable to the transfer.
Direct marketing messages
The e-mail address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, he must select the corresponding reference in the e-mail header or contact customer support.
If personal data is processed for the purpose of direct marketing (profiling), the customer has the right to object to the initial and further processing of his personal data, including profile analysis related to direct marketing, at any time by notifying customer support by e-mail.
Solving arguments
Disputes related to the processing of personal data are resolved through customer support at the e-mail address haabersti.vetkeskus@gmail.com. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).