Privacy Policy
USE OF COOKIES
The Web Store uses cookies. A cookie is a small text file that the web browser automatically stores on the customer’s device. Cookies are used to collect information about how the customer uses the Web Store in order to provide a better user experience.
The Web Store uses the following types of cookies:
- Session cookies, intended to enable the use of the Web Store;
- Persistent cookies, intended to remember the customer's preferences;
- First-party and/or third-party cookies, intended to display relevant advertisements and offers;
- Third-party analytics cookies, intended to optimize marketing communications.
The customer can delete and/or block cookies by adjusting the browser settings. Disabling cookies may affect the functionality of the Web Store, and some features may become unavailable.
In addition to using analytics cookies, the Web Store uses pixel tags (web beacons) to monitor website usage without processing personally identifiable data.
PROCESSING OF PERSONAL DATA
The controller of personal data in the Web Store is Restomaster OÜ (registration code 14935481), located at Lähtse tee 10, Paekna village, 75408 Harju County, Estonia, email: info@restomaster.ee.
WHAT PERSONAL DATA IS PROCESSED
- Name, phone number, and email address;
- Delivery address;
- Bank account number;
- Purchase details and payment information (purchase history);
- Customer support information.
PURPOSE OF PROCESSING PERSONAL DATA
Personal data is used to manage customer orders and deliver goods.
Purchase history (purchase date, items, quantity, customer details) is used to provide an overview of purchased goods and services and to analyze customer preferences.
Bank account numbers are used to refund payments to customers.
Personal data such as email, phone number, and name is processed for customer service purposes related to goods and services.
The IP address or other network identifiers are processed for providing the Web Store service and compiling web usage statistics.
LEGAL BASIS
The processing of personal data is based on fulfilling a contract with the customer.
Processing also takes place to comply with legal obligations (e.g., accounting, consumer dispute resolution).
RECIPIENTS TO WHOM PERSONAL DATA IS DISCLOSED
Personal data is disclosed to the Web Store’s customer support to manage purchases and purchase history and resolve customer issues.
Name, phone number, and email address are disclosed to the chosen delivery service provider. If a courier service is used, the customer’s address is also disclosed.
Accounting services are provided by a service provider, and personal data is shared for accounting purposes.
Personal data may also be disclosed to IT service providers if necessary for the functionality or hosting of the Web Store.
SECURITY AND ACCESS TO DATA
Personal data is stored on servers provided by ShopRoller.com within the EU or countries with an adequate level of data protection recognized by the European Commission, and by U.S. companies certified under the Privacy Shield framework.
Access to personal data is granted to Web Store employees who need the data to resolve technical issues related to the use of the Web Store or to provide customer support.
The Web Store applies appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure.
The transfer of personal data to authorized processors (e.g., delivery services, hosting providers) is based on contracts requiring appropriate data protection measures.
ACCESSING AND CORRECTING PERSONAL DATA
Personal data can be accessed and corrected via the user profile in the Web Store. If a purchase was made without a user account, customer support can assist with accessing the data.
WITHDRAWAL OF CONSENT
If processing is based on the customer’s consent, the customer can withdraw consent by notifying customer support by email.
STORAGE
Upon closure of a customer account, personal data is deleted unless it is necessary to retain the data for accounting or dispute resolution purposes.
If a purchase was made without a customer account, purchase history is retained for three years.
In the case of payment or consumer disputes, personal data is retained until the claim is fulfilled or the statute of limitations expires.
Data necessary for accounting is retained for seven years.
DELETION
To delete personal data, the customer must contact customer support by email. Requests will be responded to within one month, specifying the deletion timeline.
TRANSFER
Requests for the transfer of personal data submitted via email will be responded to within one month. Identity verification will be carried out, and information about transferable data will be provided.
DIRECT MARKETING MESSAGES
The customer's email address and phone number may be used for direct marketing messages if the customer has given prior consent. Customers can unsubscribe via the link provided in the email footer or by contacting customer support.
If personal data is processed for direct marketing purposes (including profiling), the customer has the right to object at any time by notifying customer support by email.
DISPUTE RESOLUTION
Disputes related to the processing of personal data are resolved via customer support at info@restomaster.ee. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).