The controller of personal data of the online store wile.ee is wile.ee (registration code 11606606), located at Pärtsaare, Poaka, Türi Parish, Järvamaa, 72233, Estonia, phone +372 511 2772, email info@wile.ee.
The controller has appointed a Data Protection Specialist whose contact details are: phone +372 511 2772 and email info@wile.ee.
What personal data is processed?
- Name, phone number and email address
- Delivery address
- Bank account number
- Cost of goods and services and payment-related data (purchase history)
- Customer support data
Purpose of processing personal data
Personal data is used to manage customer orders and deliver goods.
Purchase history data (purchase date, product, quantity, customer details) is used to compile an overview of purchased goods and services and to analyse customer preferences.
The bank account number is used to process refunds to customers.
Personal data such as email address, phone number and customer name is processed to resolve issues related to the provision of goods and services (customer support).
The IP address or other network identifiers of the online store user are processed for the provision of the online store as an information society service and for compiling web usage statistics.
Legal basis
Personal data is processed for the performance of a contract concluded with the customer.
Personal data is also processed to fulfil legal obligations (e.g. accounting and resolving consumer disputes).
Recipients of personal data
Personal data is transferred to the online store’s customer support for managing purchases and purchase history and resolving customer issues.
The customer’s name, phone number and email address are forwarded to the transport service provider selected by the customer. If goods are delivered by courier, the customer’s address is also provided in addition to contact details.
If the accounting of the online store is carried out by a service provider, personal data is transferred to the service provider for accounting purposes.
Personal data may also be transferred to IT service providers where necessary to ensure the functionality or data hosting of the online store.
Security and access to data
Personal data is stored on the servers of Zone Media OÜ, located within a Member State of the European Union or in countries that have joined the European Economic Area. Data may be transferred to countries that the European Commission has deemed to provide an adequate level of data protection and to U.S. companies that have joined the Privacy Shield framework.
Access to personal data is granted to employees of the online store who need access in order to resolve technical issues related to the use of the online store and to provide customer support services.
The online store implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure.
Transfers of personal data to authorised processors (e.g. transport service providers and data hosting providers) are based on contracts concluded between the online store and the authorised processors. Authorised processors are required to ensure appropriate safeguards when processing personal data.
Access to and correction of personal data
Personal data can be accessed and corrected in the user profile of the online store. If a purchase has been made without a user account, personal data can be accessed via customer support.
Withdrawal of consent
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw consent by notifying customer support via email.
Retention
Upon closure of a customer account in the online store, personal data will be deleted unless such data must be retained for accounting purposes or for resolving consumer disputes.
If a purchase has been made without a customer account, the purchase history will be retained for three years.
In the event of disputes related to payments or consumer complaints, personal data will be retained until the claim is satisfied or until the expiry of the limitation period.
Personal data required for accounting purposes will be retained for seven years.
Deletion
To request deletion of personal data, the customer must contact customer support via email. Deletion requests will be responded to no later than within one month, specifying the data deletion period.
Data portability
Requests for the transfer of personal data submitted by email will be responded to within one month at the latest. Customer support will verify the identity of the requester and provide information on the personal data subject to transfer.
Direct marketing communications
The email address and phone number are used to send direct marketing communications if the customer has given consent. If the customer does not wish to receive direct marketing communications, they can select the relevant link in the footer of the email or contact customer support.
Dispute resolution
Disputes related to the processing of personal data can be resolved through customer support: phone +372 511 2772, email info@wile.ee.
The supervisory authority is the Eesti Andmekaitse Inspektsioon (info@aki.ee).