PRIVACY POLICY

The online store (RHSUPERIOR OÜ), hereinafter referred to as the online store, is committed to protecting the privacy of its customers and users. This privacy policy outlines the principles for collecting, using, transferring, and storing customer data.

Processing of Personal Data

The responsible processor of personal data is RHSUPERIOR OÜ (registration code 16833392), located at Raadiraja tn 18-3, 60532, Tartu. Contact person: info@rhsuperior.ee.

Personal data processed:

• Name
• Phone number
• Email address
• Delivery address
• Price of the goods

Why is Personal Data Processed?

Personal data is used to manage customer orders and deliver goods. Purchase history data (purchase date, goods, quantity, customer details) is used to create an overview of purchased goods and services and analyze customer preferences. Personal data such as email, phone number, and customer name is processed to resolve issues related to the offer of goods and services (customer support). The IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and for web usage statistics.

Legal Basis

Personal data is processed for the purpose of fulfilling a contract concluded with the customer. Personal data is also processed to fulfill legal obligations.

Recipients of Personal Data

Personal data is shared with the online store’s customer support for managing purchases and purchase history and for resolving customer issues. If accounting for the online store is provided by a service provider, personal data will be transferred to the service provider for accounting purposes. Personal data may also be shared with IT service providers if necessary to ensure the functionality of the online store or data hosting services. RHSUPERIOR OÜ acts as the controller of personal data and transfers the data required for payments to the authorized processor Maksekeskus AS.

Security and Access to Data

Personal data is stored on Veebimajutus.ee servers. Data may be transferred to countries deemed to have adequate levels of data protection by the European Commission and to U.S. companies adhering to the Privacy Shield framework. Online store employees have access to personal data to resolve technical issues related to the use of the online store and provide customer support. The online store employs appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure. Data transfers to authorized processors (e.g., transport service providers or data hosting) are carried out based on agreements between the online store and authorized processors. Authorized processors are required to ensure adequate safeguards when processing personal data.

Viewing and Modifying Personal Data

Personal data can be viewed and modified through the user profile of the online store. If the purchase was made without a user account, personal data can be accessed through customer support.

Withdrawal of Consent

If personal data processing is based on customer consent, the customer has the right to withdraw consent by notifying customer support via email.

Retention of Personal Data

When an online store customer account is closed, personal data is deleted unless it needs to be retained for accounting or dispute resolution purposes. If a purchase is made in the online store without a customer account, purchase history is retained for three years. Personal data related to payment disputes or consumer complaints will be retained until the claim is fulfilled or the statute of limitations expires. Personal data required for accounting purposes is retained for seven years.

Deletion of Personal Data

To delete personal data, contact customer support via email. Requests for deletion will be responded to within a maximum of one month, specifying the data deletion period.

Transfer of Personal Data

Requests for the transfer of personal data submitted via email will be responded to within one month. Customer support will verify the identity of the requester and notify them of the data to be transferred.

Direct Marketing Messages

Email addresses and phone numbers are used for sending direct marketing messages if the customer has provided consent. If the customer does not wish to receive marketing messages, they can opt-out using the link provided in the email footer or by contacting customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support via email.

Dispute Resolution

Disputes related to personal data processing are resolved through customer support (email: info@rhsuperior.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).