PRIVACY POLICY

PROCESSING OF PERSONAL DATA

What personal data are processed

• name, phone number and email address;

Why personal data are processed
Personal data are used to manage the customer’s orders and deliver goods.
Purchase history details (date of purchase, goods, quantity, customer’s data) are used for preparing summaries of goods and services purchased.
Personal data such as email, phone number and the customer’s name are processed to handle any issues relating to the provision of goods and services.

Legal grounds
Personal data are processed for the purpose of performing a contract concluded with the customer.
Personal data are processed for performing legal obligations (such as accounting and the settlement of consumer complaints).

Recipients of personal data
Personal data are transmitted to the Baltex sales department for managing purchases and purchase history and for settling any problems that the customers may have.
Customer’s name, phone number and address are transmitted to the transport service provider.

Security and access to data
Personal data are stored in the servers, which are located on the territory of a member state of the European Union or states of the European Economic Area. Data may be transferred to the countries whose data protection levels have been assessed as adequate by the European Commission and to the companies in the USA who have joined the Privacy Shield framework.

Personal data can be accessed by the staff of Baltex in order to settle technical issues related to the trade process and to provide customer support.

Baltex takes appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

Personal data are transmitted to the data processors of the Baltex (such as the providers of transport and data hosting services) and processed under contracts concluded between the Baltex and the processors. The processors must ensure appropriate safeguards when processing personal data.

Access to and rectification of personal data
Personal data can be accessed and rectified in the user profile via sales department.

Withdrawal of consent
Where personal data are processed on the basis of the customer’s consent, the customer has the right to withdraw his/her consent by notifying sales department by email.

Storage
Personal data are erased upon the closure of a customer account of the online shop, unless the storage of the data is necessary for accounting purposes or for the settlement of consumer disputes.
For online purchases made without a customer account, the purchase history is stored according to valid legal acts in Estonian Republic territory.
In the event of disputes concerning payments and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period.
Personal data needed for accounting purposes are stored for seven years.

Erasure
For the erasure of the personal data, sales department must be contacted via email. Requests of erasure are responded to no later than within one month and the period of erasure shall be specified.

Transmission
Requests to transmit personal data submitted via email are responded to within one month. Customer support identifies the person and indicates what personal data are to be transmitted.

Direct marketing messages
Email address and phone number are used for sending direct marketing messages if the customer has given the respective consent. If the customer does not want to receive direct marketing messages, the customer should select the relevant link at the footer of the email or contact sales department.

If the personal data is processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling in relation to direct marketing, by informing the Sales Department by e-mail.

Dispute resolution
Dispute resolutions to the processing of personal data are handled through the Sales Department. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).

USE OF COOKIES

To provide you with a better user experience, we use cookies on the baltex.ee website.

For this:

• we store information on devices,
• we have access to your device information (cookies),
• we process your personal data.

Processed personal data includes:

• identifiers,
• geolocation data,
• standard information sent by the device,
• information on the characteristics of the device.