FendaF Privacy Policy
General Principles
These personal data processing terms have been prepared to protect the privacy of customers. The principles below explain how customer data is collected, used, disclosed, transferred and stored. FendaF operates in accordance with the applicable legislation of the European Union and the laws of the Republic of Estonia.
Definitions
- Customer – a legal or natural person who wishes to purchase goods or who has purchased goods.
- Customer personal data – any information relating to an identified or identifiable natural person, regardless of the form or format of such data. Personal data may include, for example, the customer’s name, gender, age, personal identification code, email address, residential address, banking details, income, photos, videos and online identifiers, such as IP addresses and cookies.
- Processing of personal data – any operation performed on personal data, including collection, recording, storage, alteration and other similar actions.
- Controller – FendaF OÜ, registry code 14300214, Vana-Tartu mnt 79, Peetri, Rae Parish, Harju County, 75312, Republic of Estonia, email address info@fendaf.ee and phone number +372 515 1619 or +372 527 0378. FendaF OÜ transfers the personal data necessary for payment processing to the authorised processor Montonio Finance OÜ.
- Authorised processor – a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Principles of Processing
When processing data, FendaF follows the principles below and ensures that customer data is processed lawfully:
- Processing is lawful, fair and transparent to the Customer.
- Personal data is collected for specified, explicit and legitimate purposes and is not further processed in a manner that is incompatible with those purposes.
- Personal data is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
- Personal data is accurate and, where necessary, kept up to date. All reasonable steps are taken to ensure that inaccurate personal data is erased or corrected without delay, taking into account the purposes of processing.
- Personal data is stored in a form that allows the Customer to be identified only for as long as is necessary for the purposes for which the personal data is processed.
- Personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Purposes of Processing
FendaF processes personal data that has been voluntarily provided by the Customer and confirmed by consent. Personal data includes: first name and surname, phone number, date of birth, personal identification code, address, email address, delivery method, payment method used to pay for the goods and purchased goods. Personal data is processed for the following purposes:
- To enter into and perform a sales agreement with the Customer.
- To deliver and hand over goods. If the Customer chooses parcel machine delivery or courier delivery, FendaF has the right to transfer the Customer’s personal data to the parcel machine service provider or courier service provider to the extent necessary to deliver the goods to the Customer.
- To issue and send invoices to the Customer.
- To correspond with the Customer.
- To provide customer service, including resolving complaints. Depending on the customer service situation, all Customer personal data may be processed for this purpose.
- To send FendaF newsletters and other information sent by FendaF by email. The Customer has the right to unsubscribe by using the hyperlink included in the newsletter or offer
- To create a registered Customer account. For this purpose, we also process the following Customer personal data: purchase history and wishlist.
- To publish photos sent by the Customer on the website, Facebook or Instagram. In such cases, FendaF’s authorised processor processes the photo material provided by the Customer. The Customer has the right to request the removal of the relevant photo material by sending an email to info@fendaf.ee;
- To protect persons and property in FendaF’s showroom, we use security cameras and process video recordings.
- To enable the Customer to use the FendaF online store.
- FendaF uses cookies on its website. Cookies are used to collect statistics about website traffic and to make the website faster and more convenient for users.
Transfer of Personal Data to Authorised Processors
FendaF keeps confidential the Customer personal data that becomes known to it during the registration and use of a user account, and discloses such data to third parties only with the Customer’s consent, unless the obligation or right to disclose the data arises from applicable legislation.
The user of the online store agrees that FendaF has the right to process their data in order to provide suitable services to the Customer, including transferring Customer data to persons involved in providing services to the Customer on behalf of FendaF.
Security and Access to Data
Personal data is stored on servers located in the territory of a Member State of the European Union or a country belonging to the European Economic Area.
The online store applies appropriate physical, organisational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access and disclosure.
Customer Rights in Relation to Personal Data Processing
A Customer who is a natural person has the following rights in relation to the processing of personal data:
- To submit a request for the correction of inaccurate personal data if the data is insufficient, incorrect or incomplete.
- To withdraw, partially or fully, their consent to the processing of personal data, for example consent to receive direct marketing offers.
- To restrict the processing of their personal data in accordance with applicable law.
- To receive the personal data they have provided and that is processed on the basis of consent or for the performance of a contract, in written or electronic form.
- To request the deletion of their data.
- To object to the processing of their data.
FendaF responds to the Customer’s request as soon as possible, but no later than within one month of receiving the Customer’s request. If the Customer submits the request electronically, the information will also be provided electronically where possible, unless the Customer requests otherwise. The Customer also has the right to contact the Estonian Data Protection Inspectorate or a court at any time if they believe that their rights have been violated.
Data Retention and Deletion
Data related to purchases made as a registered customer of the online store is retained for at least seven years.
In the case of disputes related to payments and consumer disputes, personal data is retained until the claim is fulfilled or until the expiry of the limitation period, up to three years.
Personal data required for accounting purposes is retained for seven years.
When an online store customer account is closed, personal data is deleted, unless such data must be retained for accounting purposes or for resolving consumer disputes.
Personal data stored in the online store together with the user account can be deleted in the FendaF online store.
Direct Marketing and Marketing Communications
The email address and phone number are used to send direct marketing messages if the Customer has given the relevant consent.
If the Customer does not wish to receive direct marketing messages, they can unsubscribe using the hyperlink included in the email.
Use of Cookies
Cookies are used to analyse user preferences in online environments, which makes it possible to make the user experience more convenient.
Cookies are small data files that are stored on your computer when you visit a website. Cookies help automatically identify your browser on the FendaF server.
The Customer may block the storage of cookies in their browser if they wish, but this may cause problems when using the website.
Validity and Amendments
The data protection terms are available to Customers on the FendaF website and in the showroom.
FendaF has the right to unilaterally update, clarify and supplement the data protection terms at any time in accordance with applicable law, informing the Customer of the changes via the FendaF website and/or by email.
If the Customer withdraws consent to the processing of personal data, it will not be possible to use the registered customer account until new consent has been given. In the case of a registered customer, a request for data deletion is treated as a request to close the registered customer account.
Dispute Resolution
Disputes related to the processing of personal data are resolved through FendaF customer service. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
