1. General Terms
1.1. This Privacy Policy regulates the principles concerning the collecting, processing, and storage of personal data. Personal data is collected and stored by the responsible processor, RESTATRADE OÜ (hereinafter referred to as data controller). 1.2. In the privacy policy sense, a data subject is a customer or any other physical individual whose personal data is processed by the data controller.
1.3. In the privacy policy sense, a customer is anyone who purchases products or services from the website of the data controller.
1.4. The data controller adheres to the principles of data processing set out in legislations. Among other things, the data controller processes personal data lawfully, fairly, and securely. The data controller can confirm that personal data is processed according to what is established in legislations.
1.5. Restatrade OÜ is the responsible personal data controller. Restatrade OÜ forwards personal data necessary to make payments to the authorized processor, Maksekeskus AS.
2. Collecting, processing, and storing personal data
2.1. Personal data collected, processed, and stored by the data controller are collected electronically, mainly via the website and email.
2.2. By sharing personal data, the data subject gives the data controller the right to collect, arrange, use, and manage personal data, which the data subject directly or indirectly shares with the data controller when purchasing products or services online, according to the purpose set out in the Privacy Policy.
2.3. The data subject guarantees that the presented data is accurate, correct, and intact. Giving false information intentionally is considered a violation of Privacy Policy. The data subject is obligated to immediately notify the data controller of any change in the presented data.
2.4. The data controller is not responsible for any damage caused to the data subject or third parties resulting from false data presented by the data subject.
3. Processing Customer’s Personal Data
3.1. The data controller has the right to process the following personal data of the data subject:
3.1.1. First and Last Name
3.1.2. Phone Number
3.1.3. Email Address
3.1.4. Delivery Address
3.1.5. Bank Account Number
3.1.6. Payment Card Details
3.2. In addition to the aforementioned, the data controller has the right to collect data concerning the customer that are available in public registries.
3.3. The legal basis for processing personal data is the General Data Protection Regulation’s article 6, points (a), b), c), and f) of paragraph (1):
a) the data subject has given consent to the processing of their personal data for one or more specific purposes;
b) personal data processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) personal data processing is necessary for compliance with a legal obligation to which the responsible processor is subject;
f) personal data processing is necessary for the purposes of the legitimate interests pursued by the responsible processor or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
3.4. Processing personal data according to the purpose of processing:
3.4.1. The purpose of processing – security and safety
The maximum retention period for personal data – in accordance with deadlines set forth by law
3.4.2. The purpose of processing – processing orders
The maximum retention period for personal data – 2 years
3.4.3. The purpose of processing – ensuring the functioning of the e-store
The maximum retention period for personal data – 2 years
3.4.4. The purpose of processing – customer management
The maximum retention period for personal data – 2 years
3.4.5. The purpose of processing – financial activities, accounting
The maximum retention period for personal data – in accordance with deadlines set forth by law
3.4.6. The purpose of processing – marketing
The maximum retention period for personal data – 2 years
3.5. The data controller has the right to forward customers’ personal data to third parties, who are, for example, authorized data processors, accountants, transport or delivery companies, transfer service providers. The data controller is the responsible processor of personal data. The data controller forwards personal data necessary for making payments to the authorized processor, Maksekeskus AS.
3.6. When processing and storing personal data of the data subject, the data controller implements organizational and technical measures that ensure the protection of personal data from accidental or illegal destruction, alteration, disclosure, and any kind of illegal processing.
3.7. The data controller stores personal data of data subjects according to the purposes of processing, but no longer than for 2 years.
4. Rights of the Data Subject
4.1. The data subject has the right to access their personal data and read it.
4.2. The data subject has the right to be informed about the processing of their data.
4.3. The data subject has the right to improve incorrect data or have it rectified.
4.4. If the data controller processes personal data of the data subject in compliance with the data subject’s consent, the data subject has the right to withdraw their consent at any given moment.
4.5. To exercise their rights, the data subject can turn to the customer services of the e-store at info@restatrade.ee.
4.6. To protect their rights, the data subject can lodge a complaint with the Estonian Data Protection Inspectorate.
5. Final Provisions
5.1. These data protection terms have been drafted in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repealing of Directive 95/46/EC (General Data Protection Regulation), with the personal data protection law of the Republic of Estonia, and with the legislation of the European Union.
5.2. The data controller has the right to alter the data protection terms partially or entirely by notifying data subjects via website https://restatrade.ee.
5.3 The data controller is the responsible processor of personal data forwarding personal data necessary to make payments to the authorized processor, Maksekeskus AS.
Cookies
What is a cookie?
A cookie is a tiny text file that the website stores on your computer, smartphone or other device and registers your activity on that website. Cookies are necessary to make browsing easier and increase the user-friendliness of the site. These do not harm your device. In this policy, the general term “cookies” is used because that is the main means for storing data used on this website, but the local storage space of the browser is used for the same purpose. All the information presented in this section also applies to that local storage space.
Why are cookies used on this website?
Cookies are a necessary part of the functioning of the website. The main goal of our cookies is to improve your browsing experience. For example, these are used to remember your preferences that can be applied during your next visits. The data collected by cookies also enable us to improve our website by predicting user loads and user patterns, assessing the website suitability regarding personal interests of users, accelerating searches, etc. If we have received your consent, in some cases, we can use cookies, tags, or other similar means to collect data so we can show you ads based on your browsing habits on our website, on third party websites or via other means.
Who uses the data stored in cookies?
Data stored in our website cookies are only used by us, except for those cookies that have been marked as third-party cookies. These are used and managed by external units to provide services ordered by us to improve user experience when browsing our website. These third-party cookies are mainly used to collect usage statistics.
How can I avoid using cookies of this website?
If you do not want to use this site’s cookies, you first need to prohibit the use of cookies in your browser and then delete the stored cookies related to this website in your browser. You can use this option every time you want to disable cookies.
How can I prohibit and block the use of cookies?
You can limit, block, or delete the cookies of this site at any given moment by changing the configuration of your browser using the following instructions. Settings are different depending on the browser, but usually you can change the cookie configuration by clicking Preferences or Tools in your menu. Additional information concerning cookie configuration in your browser can be found in your browser menu under Help.
What specific cookies are used by this website and why?
Alumises tabelis on loetletud sellel veebisaidil kasutatavad küpsised, sildid jms koos informatsiooniga nende kõigi eesmärgi, eluea ja kuuluvuse (meie või kolmandate osapoolte oma) kohta.
In the table below/Below, the cookies, tags, etc. used by this site are listed along with the information regarding their purpose, retention, and ownership (ours or third parties).
Origin (WC_GASource) – This is used to register from where the user entered the site, e.g., whether they came via a product group page of product details, search engine or external website.
Google Analytics – This enables us to monitor the website using the Google Analytics tool. It is a service provided by Google to collect data regarding user visits on websites. Some of the data stored for following analysis are: how many times the user visits the website, the dates of their first and last visits, duration of visits, from which site the user accessed the website, what search engine the user used to get to the website or which link they clicked, from which part of the world they are visiting the site, etc. The configuration of these cookies is set out by the service provided by Google Inc, which is why we suggest you read the Privacy Policy of Google Analytics. There you can find detailed information about what type of cookies it uses and how to block them (based on the assumption that we are not responsible for the content or clarity of third-party websites).