The controller of the personal data of the online shop is Madam Schuster OÜ (registry code 16407598), located at Gonsiori 13-22, Tallinn, 10124, Estonia, phone +372 5108295 and e-mail grete@madamschuster.com.
Which personal data are processed?
Name, phone number and e-mail address; delivery address; bank account number; cost of goods and services and data related to payments (purchase history); customer support data; IP address.
For which purposes are personal data processed?
Personal data is used to manage the customer's orders and to deliver goods. Purchase history data are used to put together an overview of the goods and services purchased and to analyse customer preferences. The bank account number is used to reimburse payments. Name, e-mail and phone number are processed to handle issues relating to goods and services. E-mail is used to forward invoices and the phone number to notify about parcel arrival. IP address is processed for the provision of the online shop as an information society service and for web use statistics.
Legal basis
Processing is necessary to fulfil the agreement with the customer (orders, delivery, returns). Personal data are also processed to fulfil legal obligations (e.g. accounting). Purchase history data is processed on the basis of legitimate interest for resolving potential consumer disputes. Data are processed with customer consent for direct marketing.
Recipients of personal data
Name, phone number and address are forwarded to the transport service provider. If accounting is handled externally, data is forwarded to that service provider. Data may be forwarded to IT service providers to ensure functionality of the online shop.
Security and access
Personal data are stored on servers located in the EU/EEA. Personal data can be accessed by staff to resolve technical issues and provide customer support. Relevant physical, organisational and IT security measures are applied to protect personal data.
Your rights
You have the right to access and rectify your personal data via customer support. You may withdraw consent, request restriction, object to processing, request erasure, or request transfer of your data by contacting
grete@madamschuster.com. Requests are responded to within one month.
Storage
Personal data are erased upon deleting the customer account, except purchase history data necessary for accounting or resolving consumer disputes. Personal data in accounting documents is stored for seven years.
Direct marketing
E-mail and phone number are used for direct marketing only with customer consent. To unsubscribe, use the link in the e-mail footer or contact customer support.
Resolution of disputes
Disputes are settled through customer support (
grete@madamschuster.com). The supervisory authority is the Estonian Data Protection Inspectorate (
info@aki.ee).