{"id":4653,"date":"2022-03-28T15:19:14","date_gmt":"2022-03-28T12:19:14","guid":{"rendered":"https:\/\/lastella.ee\/privacy-policy\/"},"modified":"2025-02-08T11:22:56","modified_gmt":"2025-02-08T08:22:56","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/lastella.ee\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n

<\/b>Privacy policy<\/span><\/b><\/h3><\/div>\n\n

The responsible data processor for the online store lastella.ee is Aares & Helina O\u00dc (registration code 16406336) that resides in Arhitekti 2-1, Tartu and e-mail is info@lastella.ee.<\/span><\/p>\n

What personal data is processed?<\/span><\/h4>\n

\u2212 name, phone number ja e-mail;<\/span>
\u2212 delivery address;<\/span>
\u2212 bank details;<\/span>
\u2212 The cost of goods and services and payment-related data (purchase history);<\/span>
\u2212 client’s details;<\/span>
\u2212 IP address.<\/span><\/h4>\n

Legal basis<\/span><\/h4>\n

The processing of personal data is carried out for the purpose of fulfilling the contract concluded with the customer. The processing of personal data is carried out for the fulfillment of a legal obligation (e.g., accounting and consumer dispute resolution).<\/span><\/p>\n

Recipients to whom personal data is disclosed<\/span><\/strong><\/h3>\n

The name, phone number, and email address are shared with the transport service provider chosen by the customer. “If it’s a delivery by courier, in addition to the contact information, the customer’s address is also provided.<\/span>
If the online store’s accounting is carried out by a service provider, then personal data is transmitted to the service provider for accounting purposes.<\/span>
Personal data may be transferred to information technology service providers if it is necessary to ensure the functionality or data hosting of the online store.<\/span><\/p>\n

Security and access to data<\/strong><\/span><\/h3>\n

“Personal data is stored on servers owned by Zone Media O\u00dc, located in a European Union member state or in countries that are part of the European Economic Area.<\/span><\/p>\n

Access to personal data is granted to the employees of the online store who need to access personal data in order to address technical questions related to the use of the online store and provide customer support. The online store implements appropriate physical, organizational, and information technology security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure. The transfer of personal data to authorized processors of the online store (e.g., transport service provider and data hosting) is based on contracts concluded between the online store and authorized processors. Authorized processors are obligated to ensure appropriate security measures when processing personal data.<\/span><\/p>\n

Familiarization with and correction of personal data<\/strong><\/span><\/h3>\n

You can view and make corrections to personal data in the online store user profile. If a purchase has been made without a user account, you can access personal data through customer support.<\/span><\/p>\n

Withdrawal of consent<\/strong><\/span><\/h3>\n

If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw their consent by notifying customer support via email.<\/span><\/p>\n

Retention<\/span><\/strong><\/h3>\n

When closing the online store customer account, personal data is deleted, except for personal data (purchase history data) that needs to be retained for accounting purposes or resolution of consumer disputes.<\/span>
In cases of disputes related to payments and consumer disputes, personal data is retained until the claim is satisfied or the expiration of the statute of limitations.<\/span>
Personal data contained in accounting source documents is retained for seven years.<\/span><\/p>\n

Restriction<\/span><\/strong><\/h3>\n

The customer has the right to request the restriction of processing of their personal data if the data is inaccurate or incomplete, or if their personal data is being processed unlawfully.<\/span><\/p>\n

Objections<\/span><\/strong><\/h3>\n

The customer has the right to object to the processing of their personal data if they have reason to believe that there is no legal basis for the processing of their personal data.<\/span><\/p>\n

Deletion<\/span><\/strong><\/h3>\n

To delete personal data, you need to contact customer support via email. A response to the deletion request will be provided no later than within one month, and the data deletion period will be specified.<\/span>
The response to the request will also specify the personal data that will not be deleted, along with the legal basis and reasoning for this.<\/span><\/p>\n

Transfer<\/strong><\/span><\/h3>\n

A response to the request for the transfer of personal data submitted via email will be provided within one month at the latest. The customer support verifies the identity and informs about the personal data that is subject to transfer.<\/span><\/p>\n

Dispute resolution<\/span><\/strong><\/h3>\n

The resolution of disputes related to the processing of personal data takes place through customer support via email at info@lastella.ee.<\/span><\/p>\n

Direct Marketing Messages<\/strong><\/span><\/h3>\n

The email address and phone number are used for sending direct marketing messages and product feedback emails when the customer has agreed to the data protection terms. If the customer does not wish to receive direct marketing messages, they should choose the appropriate link in the email footer or contact customer support.<\/span><\/p>\n

Dispute resolution<\/strong><\/span><\/h3>\n

The resolution of disputes related to the processing of personal data takes place through customer support at info@lastella.ee<\/a>. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee<\/a>).<\/span><\/p>\n\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4653","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/pages\/4653","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/comments?post=4653"}],"version-history":[{"count":2,"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/pages\/4653\/revisions"}],"predecessor-version":[{"id":7886,"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/pages\/4653\/revisions\/7886"}],"wp:attachment":[{"href":"https:\/\/lastella.ee\/en\/wp-json\/wp\/v2\/media?parent=4653"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}