The controller of personal data of the online shop www.nobsi.ee is Nobsi OÜ with the registration code 16411538, located at Telliskivi tn 4, Aegviidu alev, Anija parish, Harjumaa, 74501. Tel.: +372 51 87 825 and e-mail: info@mynobsi.com.
Nobsi OÜ controls personal data and shares necessary information for payment processing with Montonio Finance OÜ.
What personal data are processed?
- Name, telephone number and e-mail address;
- delivery address;
- bank account number;
- the cost of the goods and services and payment details (purchase history);
- customer support data.
Purposes for which personal data are processed
We use personal data to manage orders, deliver goods, process refunds, and resolve customer service requests.
Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of the goods and services purchased and to analyse customer preferences.
The bank account number is used to return payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support).
The IP address of the user of the webshop or other network identifiers are processed for the purpose of providing the webshop as an information society service and for web usage statistics.
Legal basis
The processing of personal data is carried out for the purposes of the performance of a contract with a customer.
Processing is necessary for fulfilling contracts and meeting legal obligations (such as accounting and resolving disputes).
Recipients to whom personal data are transferred
The personal data will be transferred to the online shop’s customer support for the management of purchases and purchase history and for the resolution of customer problems.
The name, telephone number and e-mail address will be transmitted to the transport service provider chosen by the customer. In the case of goods to be delivered by courier, the customer’s address will be transmitted in addition to the contact details.
In the case of the accounting of the online shop by the service provider, the personal data will be transmitted to the service provider for the purpose of accounting operations.
Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality or data availability of the online shop.
Security and access to data
Personal data is stored on servers of Elkdata OÜ (registration code 10510593) located in the territory of a Member State of the European Union or in the territory of a country that is a member of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States of America that have signed up to the Privacy Shield framework.
Access to personal data is granted to the employees of the online shop who can access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support services.
The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
The transfer of personal data to the online shop’s processors (e.g. the transport service provider and data aggregator) is subject to agreements between the online shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.
Access and rectification of personal data
Personal data can be accessed and corrected in the user profile of the online shop. If a purchase has been made without a user account, the personal data can be accessed via the online shop.
Withdrawing consent
Where the processing of personal data is based on the consent of the customer, the customer has the right to withdraw his consent by informing customer support by e-mail.
Retention
Personal data will be deleted upon closure of the online shop’s customer account, except where such data need to be kept for accounting purposes or for the settlement of consumer disputes.
If a purchase has been made in the online shop without a customer account, the purchase history will be kept for three years.
In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires.
Personal data necessary for accounting purposes will be kept for seven years.
Deletion
In order to delete personal data, please contact customer support by e-mail. A reply to the deletion request will be sent within one month at the latest, specifying the period of deletion.
Transfer to
Requests for transfer of personal data made by e-mail will be answered within one month at the latest.
Customer Support will verify the identity and inform about the personal data to be transferred.
Direct marketing communications
The e-mail address and telephone number will be used to send direct marketing communications if the customer has given his consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the footer of the e-mail or contact customer support.
Where personal data are processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of his/her personal data, including profiling for direct marketing purposes, by informing customer support by email to info@mynobsi.com (this information must be provided clearly and separately from any other information).
Dispute resolution
Disputes relating to the processing of personal data can be resolved by contacting Customer Support by e-mail at info@mynobsi.com or by telephone at+3725187825. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).