Privaatsuspoliitika

Processing of personal data

The responsible processor of personal data is Superior Holding OÜ (registration code 17573272), located at Rehetare tee 15-2, Soinaste küla, Kambja vald, 61709, Tartu maakond. Contact: info@rhsuperior.com.

Töödeldavad isikuandmed:

• Nimi
• Telefoninumber
• E-posti aadress
• Kohaletoimetamise aadress
• Kaupade hind

Why is personal data processed?

Personal data is used to manage customer orders and deliver goods. Purchase history data (purchase date, goods, quantity, customer details) is used to create an overview of purchased goods and services and to analyse customer preferences. Personal data such as email, phone number and customer name is processed to resolve issues related to the offer of goods and services (customer support). The IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and for web usage statistics.

Legal basis

Personal data is processed for the purpose of fulfilling a contract concluded with the customer. Personal data is also processed to fulfil legal obligations.

Recipients of personal data

Personal data is shared with the online store’s customer support for managing purchases and purchase history and for resolving customer issues. If accounting for the online store is provided by a service provider, personal data will be transferred to the service provider for accounting purposes. Personal data may also be shared with IT service providers if necessary to ensure the functionality of the online store or data hosting services. The name, address, phone number and email address needed to deliver an order are passed to the carrier chosen at checkout: DPD, Omniva, Unisend, SmartPost, or Montonio International Shipping for deliveries outside the Baltics. Superior Holding OÜ acts as the controller of personal data and transfers the data required for payments to Montonio, the payment service provider used at checkout. Card details are entered on the payment provider’s own pages and are never received or stored by the online store.

Security and access to data

Personal data is stored on Veebimajutus.ee servers. Data may be transferred to countries deemed to have adequate levels of data protection by the European Commission. Online store employees have access to personal data to resolve technical issues related to the use of the online store and to provide customer support.

The online store employs appropriate physical, organizational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure. Data transfers to authorized processors (for example transport service providers or data hosting) are carried out based on agreements between the online store and the authorized processors. Authorized processors are required to ensure adequate safeguards when processing personal data.

Viewing and modifying personal data

Personal data can be viewed and modified through the user profile of the online store. If the purchase was made without a user account, personal data can be accessed through customer support.

Withdrawal of consent

Kui isikuandmete töötlemine põhineb kliendi nõusolekul, on kliendil õigus nõusolek tagasi võtta, teatades sellest klienditoele e-posti teel.

Retention of personal data

Kui e-poe kliendikonto suletakse, kustutatakse isikuandmed, välja arvatud juhul, kui neid on vaja säilitada raamatupidamise või vaidluste lahendamise eesmärgil. Kui e-poes tehakse ost ilma kliendikontota, säilitatakse ostuajalugu kolm aastat. Maksevaidluste või tarbijakaebustega seotud isikuandmeid säilitatakse kuni nõude täitmiseni või aegumistähtaja möödumiseni. Raamatupidamise eesmärgil vajalikke isikuandmeid säilitatakse seitse aastat.

Deletion of personal data

Isikuandmete kustutamiseks võtke ühendust klienditoega e-posti teel. Kustutamistaotlustele vastatakse maksimaalselt ühe kuu jooksul, täpsustades andmete kustutamise perioodi.

Transfer of personal data

E-posti teel esitatud isikuandmete edastamise taotlustele vastatakse ühe kuu jooksul. Klienditugi kontrollib taotluse esitaja isikusamasust ja teavitab teda edastatavatest andmetest.

Cookies

A cookie is a small text file that a website stores in your browser. This online store uses cookies in three groups. Only the first group is set without asking.

• Necessary — these keep the shopping cart and checkout working, keep you signed in to your account, and remember the cookie choice you make below. The store cannot function without them, so they are always on and require no consent.
• Partner links — if you arrive through a partner’s referral link, a first-party cookie remembers which partner sent you for 30 days, so that any order you place can be credited to them. It holds only the partner’s code, is not shared with anyone, and is needed to honour our agreement with that partner.
• Analytics — these tell us how the site is found and used, so we can improve it. They are set only if you agree.
• Marketing — these let us measure whether our advertising works and show relevant ads elsewhere. They are set only if you agree.

When you first visit, a notice asks which groups you allow. Nothing in the analytics or marketing group loads before you choose — the scripts are present on the page but inactive until consent is given. Your choice is stored for six months, and you can change or withdraw it at any time through the Cookie settings link in the footer of every page. Withdrawing consent does not affect anything processed before you withdrew it.

Analytics and marketing services

If you allow the corresponding group, the following services are used. Each of them may set its own cookies and receive your IP address, the pages you view and information about your device and browser.

• Google Analytics 4 (analytics) — provided by Google Ireland Limited. Used to see which pages are visited and how visitors reach the store.
• Microsoft Clarity (analytics) — provided by Microsoft Ireland Operations Limited. Used to see how pages are actually used, so that confusing parts can be found and fixed.
• Meta Pixel (marketing) — provided by Meta Platforms Ireland Limited. Used to measure the results of advertising on Facebook and Instagram. On product pages and after a completed order it also reports which products were viewed or bought, and the order total.
• Google Ads (marketing) — provided by Google Ireland Limited. Used to measure the results of advertising through Google.

These providers are established in the European Union, but they belong to groups that may transfer data to the United States. Such transfers take place under the European Commission’s standard contractual clauses and, where the provider is certified, under the EU–US Data Privacy Framework. If you do not allow analytics or marketing cookies, no data is sent to any of these services.

Newsletter

If you subscribe to the newsletter, your email address is passed to Smaily, the email service used to send it, and is processed only for that purpose. Subscribing is voluntary and separate from placing an order. Every newsletter contains an unsubscribe link, and you can also unsubscribe by writing to customer support.

Direct marketing messages

Email addresses and phone numbers are used for sending direct marketing messages if the customer has provided consent. If the customer does not wish to receive marketing messages, they can opt out using the link provided in the email footer or by contacting customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support via email.

Your rights

You have the right to ask what personal data is held about you, to have it corrected, to have it deleted, to receive it in a machine-readable form, and to object to or restrict its processing. Requests go to info@rhsuperior.com and are answered within one month. Where processing rests on your consent — cookies and the newsletter — you may withdraw that consent at any time, as described above.

Dispute resolution

Disputes related to personal data processing are resolved through customer support (info@rhsuperior.com). Järelevalveasutus on Eesti Andmekaitse Inspektsioon (info@aki.ee).