PROCESSING OF PERSONAL DATA
The data controller for personal data in the Ärni Blum online store is Ärni Blum OÜ (registry code [16064367]), located at Sõjakooli 12, Tallinn, email: info@arniblum.com.
WHAT PERSONAL DATA IS PROCESSED
- name, phone number, and email address;
- delivery address for goods;
- bank account number;
- cost of goods and services and payment-related data (purchase history);
- customer support data;
- online store user’s IP address and other network identifiers.
PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
- Order processing and delivery → Performance of a contract (GDPR Article 6(1)(b))
- Analysis of purchase history and research of customer preferences → Legitimate interest (GDPR Article 6(1)(f))
- Provision of customer support → Performance of a contract (GDPR Article 6(1)(b))
- Data retention for accounting purposes → Legal obligation (GDPR Article 6(1)(c))
- Direct marketing (newsletters, advertisements) → Consent (GDPR Article 6(1)(a)) or legitimate interest (GDPR Article 6(1)(f)), if the customer is an existing one
- Use of cookies for advertising and analytics → Consent (GDPR Article 6(1)(a))
- Analysis of IP address and cookies to monitor website usage → Legitimate interest (GDPR Article 6(1)(f)), if necessary for functionality
SOURCES OF PERSONAL DATA
Personal data is collected directly from the customer when placing an order in the online store, through customer support inquiries, or via website cookies and analytics. If necessary, information may also be obtained from payment service providers.
RECIPIENTS TO WHOM PERSONAL DATA IS TRANSFERRED
- Online store customer support for managing purchases and purchase history.
- Name, phone number, and email address are forwarded to the transport service provider chosen by the customer.
- Accounting and payment processing service providers.
- Information technology service providers to ensure the functionality of the online store.
- Marketing and analytics service providers (e.g., Google Analytics, Facebook Pixel, Meta), for which prior consent is requested.
DATA TRANSFER OUTSIDE THE EU
If data is transferred outside the European Economic Area, its protection is ensured by EU standard contractual clauses or other appropriate safeguards.
SECURITY AND ACCESS TO PERSONAL DATA
Data is accessible only to employees who require it for the performance of their duties.
Technical and organizational security measures are used to protect data from unauthorized access and leakage.
ACCESSING, CORRECTING, AND DELETING PERSONAL DATA
Customers can access and correct their personal data by contacting us at: info@arniblum.com.
To request data deletion, an email application must be submitted.
Deletion requests will be responded to within 30 days.
DATA RETENTION PERIOD
- Upon closing an online store customer account, personal data will be deleted, unless it is necessary to retain the data for accounting or consumer dispute resolution purposes.
- Purchase history is retained for three years.
- Data related to payments and consumer disputes is retained until the claim is fulfilled or the limitation period expires.
- Personal data required for accounting is retained for seven years.
DATA PORTABILITY
Data portability requests must be submitted by email and will be responded to within 30 days.
DIRECT MARKETING MESSAGES AND COOKIES
Email addresses and phone numbers are used for sending direct marketing messages only with the customer’s consent.
Cookies are used only if the customer gives consent.
Information on how to opt out of cookies is provided in the website’s cookie policy.
CHANGES TO THE PRIVACY POLICY
Customers will be notified of significant changes to the privacy policy via email. New changes will take effect after notification.
DISPUTE RESOLUTION
Disputes related to the processing of personal data are resolved through customer support at info@arniblum.com. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
