PROCESSING OF PERSONAL DATA

The controller of personal data of the Ärni Blum online store is Ärni Blum OÜ (registration code [16064367]), located at Sõjakooli 12, Tallinn, e-mail: info@arniblum.com.

WHAT PERSONAL DATA WILL BE PROCESSED

• name, telephone number and email address;
• delivery address;
• bank account number;
• cost of goods and services and payment-related data (purchase history);
• customer support data;
• IP address and other network identifiers of the online store user.

FOR WHAT PURPOSES ARE PERSONAL DATA PROCESSED AND LEGAL BASIS

• Order processing and delivery → Contract performance (GDPR Article 6(1)(b))
• Analysis of purchase history and research of customer preferences → Legitimate interest (GDPR Article 6(1)(f))
• Provision of customer support → Contract performance (GDPR Article 6(1)(b))
• Retention of data for accounting purposes → Legal obligation (GDPR Article 6(1)(c))
• Direct marketing (newsletters, advertisements) → Consent (GDPR Article 6(1)(a)) or legitimate interest (GDPR Article 6(1)(f)) if it is an existing customer
• Use of cookies for advertising and analytics → Consent (GDPR Article 6(1)(a))
• Analysis of IP address and cookies to track website usage → Legitimate interest (GDPR Article 6(1)(f)) if necessary to ensure functionality

SOURCES OF PERSONAL DATA

Personal data is collected directly from the customer when placing an order in the online store, when contacting customer support, or through website cookies and analytics. If necessary, information may also be obtained from payment service providers.

RECIPIENTS TO WHOM PERSONAL DATA IS TRANSFERRED

• Online store customer support for managing purchases and purchase history.
• Name, phone number and email address are forwarded to the shipping service provider selected by the customer.
• Accounting and payment processing service providers.
• Information technology service providers to ensure the functionality of the online store.
• Marketing and analytics service providers (e.g. Google Analytics, Facebook Pixel, Meta), for the use of which prior consent is requested.

TRANSFER OF DATA OUTSIDE THE EU

If data is transferred outside the European Economic Area, its protection will be ensured by EU standard contractual clauses or other appropriate safeguards.

PERSONAL DATA SECURITY AND ACCESS

Only those employees who need it to perform their job duties can access the data.
Technical and organizational security measures are used to protect the data from unauthorized access and leakage.

ACCESSING, CORRECTION AND DELETING PERSONAL DATA

Customers can access their personal data and make corrections by contacting us by e-mail: info@arniblum.com.
A request for deletion of data must be submitted by e-mail.
A deletion request will be responded to within 30 days at the latest.

DATA RETENTION PERIOD

• When closing an online store customer account, personal data will be deleted, except if the data needs to be retained for accounting or resolving consumer disputes.
• Purchase history will be retained for three years.
• Data related to payments and consumer disputes will be retained until the claim is satisfied or the statute of limitations expires.
• Personal data required for accounting purposes will be retained for seven years.

PERSONAL DATA PORTATION

Requests for data portability must be submitted by email and will be responded to within 30 days.

DIRECT MARKETING MESSAGES AND COOKIES

Email address and phone number are used to send direct marketing messages only with the customer’s consent.
Cookies are used only if the customer gives their consent.
The option to opt out of cookies is provided in the cookie policy on the website.

CHANGES TO THE PRIVACY POLICY

Customers will be notified of changes to the privacy policy by email if the changes are significant. New changes will enter into force after notification.

DISPUTE RESOLUTION

Disputes related to the processing of personal data are resolved through customer support at info@arniblum.com. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).