Privacy Policy
PERSONAL DATA PROCESSING
The responsible processor of personal data for the Reedest online store is Reedest OÜ (registry code 16896041), located at Rahukohtu tn 4/2, 10130, Kesklinna district, Tallinn, Harju County. Email: info@reedest.com.
TYPES OF PERSONAL DATA PROCESSED
Name, phone number, and email address
Delivery address
Bank account number
Purchase details and payment information (purchase history)
Customer support data
PURPOSE OF DATA PROCESSING
Personal data is used for managing customer orders and delivering goods.
Purchase history data (purchase date, items, quantities, customer information) is used to provide an overview of purchased goods and services and to analyze customer preferences.
Bank account numbers are used for processing refunds.
Personal data such as email, phone number, and customer name is used to handle issues related to the provision of goods and services (customer support).
The user’s IP address or other network identifiers are processed to provide the online store as an information society service and for web usage statistics.
LEGAL BASIS
Processing of personal data is necessary for the fulfillment of a contract with the customer.
Processing also occurs to comply with legal obligations (e.g., accounting and resolution of consumer disputes).
RECIPIENTS OF PERSONAL DATA
Personal data is forwarded to the online store’s customer support to manage purchases and purchase history and resolve customer issues.
Name, phone number, and email address are shared with the selected transport service provider. If the goods are delivered by courier, the customer’s address is also provided.
The online store’s accounting is handled by a service provider, to whom necessary data is shared for accounting purposes.
IT service providers may receive data if required for the functionality or hosting of the online store.
SECURITY AND ACCESS TO DATA
Reedest OÜ is the data controller.
The controller has the right to share personal data with third parties such as authorized processors, accountants, courier companies, and payment service providers. The payment-related data is forwarded to Maksekeskus AS.
Only employees of the online store can access personal data and only for resolving technical issues related to the store or providing customer support.
The online store implements appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, modification, or unauthorized access and disclosure.
Data sharing with authorized processors (e.g., transport service providers, hosting services) is based on agreements that include data protection obligations.
ACCESSING AND CORRECTING PERSONAL DATA
Personal data can be accessed and corrected via the user’s account in the online store. If a purchase was made without creating an account, data can be accessed via customer support.
WITHDRAWAL OF CONSENT
Personal data can be accessed and corrected via the user’s account. If the purchase was made without an account, data can be accessed through customer support.
DATA RETENTION
When a customer account is closed, personal data is deleted unless retention is required for accounting or consumer dispute resolution.
If a purchase is made without creating an account, purchase history is retained for 3 years.
In case of disputes related to payments or consumer rights, data is retained until the claim is resolved or the statute of limitations expires.
Accounting-related data is retained for 7 years.
DATA DELETION
To request deletion of personal data, contact customer support via email. The request will be responded to within one month, and you will be informed of the data deletion timeline.
DATA PORTABILITY
Requests for data portability submitted via email will be responded to within one month. The customer support team will verify identity and inform you which personal data is transferable.
DIRECT MARKETING
Email addresses and phone numbers are used for sending direct marketing messages only if the customer has given explicit consent. If you no longer wish to receive these messages, you can unsubscribe via the link at the bottom of the email or contact customer support.
If personal data is used for direct marketing (profiling), the customer has the right to object at any time by notifying customer support via email. This notice must be clearly presented and separate from other content.
DISPUTE RESOLUTION
Disputes related to personal data processing are resolved through customer support at info@reedest.com. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
