Personal data means any data that can be directly or indirectly associated with you as an individual, which are collected and processed by Sirel to fulfill contracts concluded with natural persons, to contact them, and perform obligations under the law.
• when providing contact information (incl. name, personal ID code, postal address, telephone number, e-mail address, a preferred method of communication) on our website or otherwise (e.g. in our store);
• when using Sirel's website, data is collected through a customer's account or cookies;
• when making a purchase or placing an order in Sirel's store or e-shop by storing personal contact information about purchase preferences (Sirel may ask costumers to voluntarily provide their data and personal information. Such personal data may include name, address, postal code, e-mail address, telephone number, and other data).
Recipients to whom the information is transmitted
Personal data may be passed on to the online store's customer support to manage purchases and purchase history and to solve customer's problems.
The name, telephone number, and e-mail address will be forwarded to the transport service provider chosen by the customer. In the case of goods delivered by courier, in addition to the contact details, the customer's address will also be provided.
Personal data is forwarded to the service provider's accountant.
Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality of the online store or data hosting.
Purpose of the processing of personal data
Personal data is used to manage customer orders and deliver goods. Purchase history data (purchase date, goods, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used to return payments to the customer. Personal data, such as e-mail, telephone number, customer name, are processed to resolve issues related to the provision of goods and services (customer support). The IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and to compile online usage statistics.
Collection of other data
Use and storage of collected personal data
Thanks to collected personal data we can inform customers about Sirel product news, campaigns, and upcoming events. A customer who does not wish to be on our newsletter list or receive notifications about products that may be of interest to them can remove themselves from the target audience at any time.
We also use the collected personal data for the delivery of goods and the fulfillment of obligations to the customer.
Sirel retains the customer's data until the termination of the loyalty agreement. Data that Sirel is required to retain under legislation (eg accounting data) shall be retained by Sirel by the requirements set out in legislation.
Protection of personal data
Sirel takes all precautions (incl. administrative, technical, and physical measures) to protect customers’ data. Only authorized persons have access to personal data for making alterations and processing the same.
Customers have the right to demand termination of the processing of their data, ask about how their data are used, request that their data be transmitted in a commonly used format either to themselves or to a third party. To avoid misuse of customer data and rights, such requests may only be submitted in a format that makes it possible to identify the person submitting that request (signed digitally or personally at the company’s office). We have the right to respond to such requests within 30 days.
We regard a request to terminate the processing of data as a request to terminate the loyal customer contract.
Security and data access
All personal data of the customer that has become known during the visit to the Sirel's e-store and the performance of purchases will be treated as confidential information. The encrypted data communication channel with banks ensures the security of the purchaser's data and bank details. Personal data is stored in the zone.ee servers located in the territory of a European Union member state or countries that have joined the European Union economic area. The data may be transferred to countries where the European Commission has assessed the level of data protection as adequate, and to US companies that are affiliated to the Privacy Shield framework. The online store shall implement appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure. Authorized processors are obliged to ensure appropriate safeguards for the processing of personal data.
The customer always has the right to apply to the Data Protection Inspectorate or a court to protect your data. The Data Protection Inspectorate is a state agency to which it is also possible to turn for advice or assistance on personal data protection issues.
Deletion of data
To delete personal data, contact customer support by e-mail. A request for deletion will be answered within a month at the latest and the period for deleting the data will be specified.
A request for the transfer of personal data submitted by e-mail will be answered within a month at the latest. Customer support identifies and notifies you of the personal data that is to be transferred.
Direct marketing communications
The e-mail address and telephone number will be used to send direct marketing messages if the customer has given his consent. If the customer does not wish to receive direct marketing communications, please select the appropriate link in the email footer or contact customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object by notifying customer support by email (email@example.com).
Settlement of disputes
Disputes related to the processing of personal data are resolved through customer support (Sirelboutique OÜ, Reg. nr. 12910983; Spordi 11-402, Tallinn, 11315; Phone (+372)56655585; Email: firstname.lastname@example.org). The supervisory authority is the Estonian Data Protection Inspectorate (email@example.com).