Privacy Policy (General principles for processing personal data at Callefiks OÜ)

GENERAL PRINCIPLES FOR PROCESSING PERSONAL DATA AT CALLEFIKS OÜ

Terms and conditions are effective as of 01.01.2020.
Callefiks OÜ (hereinafter Callefiks) is a legal person with registry code 10708912 and address Artelli 19, 10621 Tallinn.
These general principles apply for the collection, processing and use of customer personal data by Callefiks in the offering and provision of its services.
These general principles contain general information about what data is collected and processed by Callefiks for the purposes described.
Collection and Use of Personal Data
Personal data is data voluntarily provided by individuals and collected by Callefiks in connection with provision of its services, incl. in transactions and inquiries with a customer and in supplying goods. Personal data may also be used for purposes of direct marketing, subject to customer consent.
This data may include person’s first and last name, date of birth and e-mail address, and, if necessary, address and telephone number. Having to make bank payments, this data may also include customer’s bank account number and name of the bank.
Callefiks shall not use or disclose personal information of a customer without the customer’s consent.
Personal data may only be collected with the customer’s consent and in the following ways:
• Customer submits his / her data to Callefiks website http://www.callefiks.ee by e-form, by phone or by making a direct purchase on the Callefiks website having registered at http://www.callefiks.ee or http://www.callefiks.ee/?lang=et;
• Customer receives confirmation of his person having been verified and / or customer’s payment order has been confirmed by the respective service provider.
Upon authentication using ID-card and Mobile-ID and signing declarations of intent or confirmation, the customer is obliged to follow the security requirements and recommendations established by the respective developers. For this we recommend you to obtain more information at http://mobiil.id.ee and http://www.id.ee.
Collection and Use of Non-Personal Data
Non-personal data is data that cannot be directly linked to a specific person (age, gender, place of residence). Callefiks uses cookies on its website to collect general statistics about website traffic. Callefiks does not track the behaviour and movement of individual people on website.
Cookie is a text file that is sent to a user’s computer by the web pages that the user visits, the cookie is then stored there. The cookie is stored in the file directory of the user’s web browser. If the customer has previously visited the website, then the browser will read the cookie and forward the received information to the website or element that initially stored the cookie. More information about cookie can be found at www.aki.ee/et/kupsised.
User of the website has the right to refuse the use of cookies. If you wish to do so, then you have to change your web browser settings accordingly.
Customer relationship is created registering purchase and service orders in the online store
The personal data registered includes the customer information (first and last name, town, postal code, telephone number, year of birth, method of delivery, payment method used). In addition, the customer shall also agree to the online store usage agreement and ordering conditions.
Personal data is processed by Callefiks OÜ.
Personal data necessary for the delivery of goods to the customer shall be forwarded to the courier company.
Callefiks undertakes not to transfer the registered personal data to unauthorised persons.
Callefiks reserves the right to disclose customer data if the data is processed by a person legally authorised to do so or the customer data is needed to be disclosed to protect the customer’s life, health or freedom.
Customer has the right to verify personal data concerning him or her, as well as to amend or remove the data from the register.
Customer agrees for Callefiks to send order confirmation to the e-mail address provided when placing an order or inquiry.
Customer agrees to give Callefiks consent to send sales offerings to the e-mail address provided when placing an order, provided that the customer has indicated their agreement on the ordering page by ticking the appropriate box.
Web Store Data Security
Customer gives Callefiks explicit and informed consent for the processing of his / her personal data.
Personal data entered and disclosed by the customer upon placing the order shall be entered in the customer register and used for the provision of sales services and offering of goods to the customer.
Card data is requested using secure SSL communications and MasterCard SecureCode and Verified by Visa security systems.
Callefiks is unable to see the card data entered. In order to make a transaction, the cardholder is directed to the secure environment of Kaardikeskus (Pankade Kaardikeskuse AS www.estcard.ee). At the time of payment, the cardholder enters the card data to the data based located in the server of Kaardikeskus, the data is also stored on the server of Kaardikeskus.
Purpose for Collection and Processing of Personal Data
The personal data collected is used to inform customers of Callefiks’ news, campaigns, offers and various events, the data is also used to conduct a transaction between the parties, incl. delivery of goods.
Card data is requested using secure SSL communications and MasterCard SecureCode and Verified by Visa security systems.
Callefiks is unable to see the card data entered. In order to make a transaction, the cardholder is directed to the secure environment of Kaardikeskus (Pankade Kaardikeskuse AS www.estcard.ee). At the time of payment, the cardholder enters the card data to the data based located in the server of Kaardikeskus, the data is also stored on the server of Kaardikeskus.
Callefiks collects, aggregates and analyses data also to receive information about the following:
• Statistics for the amount of times newsletters sent have been opened;
• Statistics for the amount of times links included in newsletters have been opened.
Personal data necessary for the delivery of goods to the customer shall be forwarded to the courier company.
Callefiks does not distribute, transmit, modify or otherwise use any personal data entrusted to it unless otherwise agreed with the customer or required by the laws of the Republic of Estonia.
Customer Rights
Customer shall have the right at any time to request a copy of the data Callefiks has collected about him / her, and to request the modification or deletion of his / her personal data.
Customer who does not wish to be included in the Callefiks newsletter / news list or wishes to have their data deleted can request this to be done at any time by writing to info@callefiks.ee.
Customer has the right to transfer his / her personal data to another data controller. Please send the applications for that to Callefiks at info@callefiks.ee in writing and signed by the customer.
Customer has the right to submit a complaint to the data protection supervisory authority regarding the way Callefiks processes data.
Protection and Security of Personal Data
Any personal data obtained by Callefiks when subscribing to a newsletter / ordering news or when making a transaction with the customer, will be treated by Callefiks as confidential information.
Access to personal data of customers is restricted to authorised parties who provide services to Callefiks (e.g. server and cloud service providers, postal and transport companies) and who have undertaken to maintain the confidentiality of information shared.
Retention of Personal Data
Callefiks shall retain customer’s personal data for as long as is necessary for the purpose for which it was collected, to protect Callefiks’ rights, and as required by law, including:
• All contractual data is usually retained for up to 3 years after the termination of the contract;
• All financial data is usually retained for 7 years after the respective financial entry is made to our accounting system;
• All communication data is usually retained for 3 years after the end of the specific communication;
• Data regarding consent for data processing is retained for the duration of the consent, taking into account the need to update the data and to delete obsolete data (e.g. data obtained through profiling);
• Data that may give rise to non-contractual claims may be retained for a maximum period of 10 years, taking into account the need to collect as little data as possible.
Modification of General Principles for Processing Personal Data
Customer has read and agreed to the General Principles for Processing Personal Data by submitting personal data to Callefiks and using the Callefiks web page, web store. Callefiks reserves the right to make changes to these general principles. In such a case, notice to this effect will be posted on the Callefiks website and the applicable general principles for processing personal data will always be available on the Callefiks website at http://www.callefiks.ee
Any questions regarding the general principles for processing personal data or data processing can be directed to Callefiks OÜ at info@callefiks.ee or by mail at Artelli 19 Tallinn, 10621.