- General provisions
1.1. This privacy policy regulates the collection, processing and storage of personal data
on the principles. Personal data collects and retains personal data
Minu Balitic OÜ Company (hereinafter data processor).
1.2. A data subject within the meaning of the privacy policy is the customer or other natural person who
The data processor.
1.3. Anyone buying a data processor’s website
goods.
1.4. Data processor complies with the principles of processing data provided for in the legislation, including
Processes personal data legally, fairly and secure by the data processor. Data processor is
able to confirm that personal data has been processed as provided for in the legislation. - Collection, processing and retention of personal data
2.1. Personal data collected, processed and stored by the data processor has been collected electronically,
Mainly via website and email.
2. By sharing its personal data, the data subject gives the data processor the right to collect,
arrange, use and manage personal data for a purpose defined in privacy policy
The data subject distributes the data processor directly or indirectly when buying goods or services on the website.
2.3. The data subject is responsible for ensuring that the data it provides is accurate, correct and
comprehensive. Substitutes to knowingly misrepresent are seen as a violation of privacy policy.
Data subject is obliged to immediately inform the data processor of the data provided
Change.
2.4. Data processor is not liable for damage caused by the data subject’s misrepresentation
for the data subject or third parties. - Processing of customer personal data
3.1. Data processor may process the following data subject’s personal data:
3.1.1.1. front and surname;
3.1.2. Birth date;
3.1.3.3. telephone number;
3.1.4. E-mail address;
3.1.5. Getting there;
3.1.6. Account number;
3.1.7. Details of the payment card;
3.2. In addition to the above, the data processor has the right to collect the customer’s data on the customer.
available in public records.
3.3. Legal basis for the processing of personal data is Article 6 of the General Regulation on the Protection of Personal Data
1 p-d a), b), c) and f):
a) the data subject has given consent to process his or her personal data in one or more
for a specific purpose;
(b) the processing of personal data is necessary for the performance of an agreement with the participation of the data subject, or
for prior measures to be concluded in accordance with the data subject’s request;
(c) the processing of personal data is necessary to comply with the legal obligation of the responsible processor;
(f) the processing of personal data is a necessary rightful interest of the responsible processor or third party
in the event, unless such interest is outweighed by the interests of the data subject or
the fundamental rights and freedoms for which personal personal data must be protected, especially if
The data subject is a child.
3.4. Processing of personal data according to the purpose of processing:
3.4.1.1. Processing – security and security
Maximum time for the retention of personal data – in accordance with the deadlines specified in the Act
3.4.2. Processing purpose – processing of order
Maximum time for the retention of personal data – according to the deadlines specified in the law.
3.4.3. Processing goal – ensuring that e-shop services work
Maximum time of storage of personal data / 1 year.
3.4.4.4. Processing purpose – customer management
Maximum time of storage of personal data / 1 year.
3.4.5. Processing – financial activity, accounting
Maximum time for the retention of personal data – in accordance with the deadlines specified in the Act
3.4.6. Processing goal – marketing
Maximum time of storage of personal data / 1 year.
3.5. Data processor has the right to share customers’ personal data with third parties
For example, authorised data processors, accountants, transport and courier companies,
The data processor of transmission services is the responsible processor of personal data.
Data processor transmits the personal data necessary to make payments by an authorised processor
Maksekeskus AS.
3.6. Data processor applies to the processing and storage of personal data subject
organisational and technical measures to ensure the protection of personal data accidentally or
Illegal destruction, conversion, disclosure and any other illegal
for processing.
3.7. Data processor keeps data subjects depending on the purpose of processing, but
no more than 2 years.
- Rights of the subject
4.1. The data subject has the right to access and access his or her personal data.
4.2. The data subject has the right to information about the processing of his or her personal data.
4.3. The data subject has the right to supplement or improve inaccurate data.
4.4. If the data processor processes the personal data subject’s personal information on the basis of the consent of the data subject,
The data subject then has the right to withdraw consent at any time.
4.5. Data subject can contact e-shop customer support for the rights
info@minubaltic.ee
4.6. Data subject can file a complaint for protecting its rights
Inspector. - Final provisions
5.1. These data protection conditions are drawn up in accordance with the European Parliament and
Council Regulation (EU) No 2016/679 on the protection of natural persons in the processing of personal data
and the free movement of such data and the repeal of Directive 95/46 / on the repeal of Directive 95/
EC (Prime Data Protection General Regulation), the Personal Data Protection Act of the Republic of Estonia and Estonia
With legislation of the Republic and the European Union.
5.2. Data processor has the right to partially or fully amend the data protection conditions by informing them
Changes to data subjects through the website www.minubaltic.ee.