The controller of the personal data of the puhali.ee website is PÜHALI HEAOLUKESKUS OÜ (registration code 16275265), Sõeru talu, Pihali village Kohila parish 79701 Raplamaa Estonia, tel (+372) 5590 8800 and e-mail info@puhali.ee.
What personal data is processed?
- name, telephone number and e-mail address;
- bank account number;
- the cost of goods and services and the details of payments (purchase history);
- customer support details.
What is the purpose of the processing?
Personal data is used to manage customer orders. Purchase history data (date of purchase, product, quantity, customer details) is used to create an overview of goods and services purchased and to analyse customer preferences. The bank account number is required to return payments to the customer, if necessary. Personal data such as e-mail, telephone number, customer name are processed in connection with solving problems related to the provision of goods and services (customer support). The IP address or other network identifiers of the user of the webshop are processed for the purposes of the webshop as an information society service and for web usage statistics.
Legal basis
Personal data is processed for the purpose of fulfilling a contract with a customer. Personal data are processed for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).
Recipients of personal data
Personal data will be transferred to the online shop’s customer support for the purpose of managing purchases and purchase history and resolving customer issues.
If the accounting of the online shop is carried out by a service provider, the personal data will be transferred to the service provider for accounting purposes.
Personal data may be transferred to IT service providers if this is necessary to ensure the functionality of the online shop or data hosting.
Security and access to data
Personal data is stored on puhali.ee servers located in the territory of a Member State of the European Union or in the territory of countries that have joined the European Economic Area. Data may be transferred to countries that have been assessed by the European Commission as providing an adequate level of data protection and to companies in the United States that have signed up to the Privacy Shield framework.
The employees of the online shop have access to personal data and may access personal data in order to solve technical problems related to the use of the online shop and to provide customer support services.
