PRIVACY POLICY/GENERAL TERMS AND CONDITIONS FOR PROCESSING PERSONAL DATA

Sokisahtel OÜ is committed to protecting the privacy of its customers and users. Based on this, we have developed the following privacy policy principles for collecting, using, publishing, transmitting and storing customer data. Our activities on the Internet are in line with all relevant activities and applicable European Union legislation, as well as the laws of the Republic of Estonia.

These General Terms and Conditions for Processing Personal Data have been established by Sokisahtel OÜ and are followed by all Sokisahtel OÜ employees and partners when processing personal data. Sokisahtel OÜ is responsible for arranging the processing of personal data at Sokisahtel OÜ and for compliance with these conditions.

For what purposes do we collect and process personal data?

We collect and use your personal data for the purpose of concluding sales contracts with you and executing orders. With your consent, we use the data to send you newsletters, offers, reminders, and other advertising emails. We may also use your personal information for other purposes as described in these Terms.

What data do we collect from you and what do we use it for?

In the process of concluding the sales contract with you, we will collect the following personal data from you: first and last name, address, telephone number, e-mail. During subsequent customer communication and ordering, we will also store information about your order (i.e. information about your orders, contracts, payments, sent emails and notifications, etc.).

For the purpose of concluding a sales contract with you or executing the contract, we may collect, save, store, transmit, use, and otherwise process your data in relevant ways, in particular, for the following operations:

• Communication with you for the purpose of concluding a contract, for communicating information related to the contract and in relation to other contractual matters. For example, we may send you emails about the completion of an online store order or invoice reminders;
• Sending you offers and product information;
• Transmission of data necessary for the execution of the order to cooperation partners (companies providing transport and courier services);
• Preparation and sending of invoices, and preparation of accounting documents;
• Risk prevention, including providing authorized IT service provider with access to data for the purpose of computer system maintenance, solving technical problems and ensuring data security.

When will we ask you for consent?

If we want to process your data for a purpose for which we do not have a contractual or other legal basis deriving from the law, we will ask you for your consent. Upon obtaining your consent, we will process your data within the scope and limits of the respective purpose.

For example, we may ask for your consent for the following actions:

• Sending important reminders about online store orders by e-mail or phone;
• Sending you newsletters, offers for goods and services, as well as congratulations by e-mail or phone. Newsletters and offers may include offers from Sokisahtel OÜ, and from our partner companies.

In addition to the above, we may ask for your consent to use your data in other ways.

You may at any time withdraw your consent by writing at  or by contacting our stores, and we will immediately terminate the respective operations if we have no other legal basis for processing the data.

In what other ways can we use your data?

We may use your data for the purposes listed below, and in the following ways, inter alia, if we have a legitimate interest in doing so.

Subject to legitimate interest, we process your personal data only after conducting the so-called “3-step test” to establish that we have a legitimate interest, that we need to process your personal data based on this legitimate interest, and that processing is in accordance with your interests and rights. You have the right to object at any time to the processing of your personal data based on our legitimate interest.

We may, based on our legitimate interest, process your personal data in relation to the management and analysis of our customer base for marketing or statistical purposes.

We may transfer your data to other parties if this is necessary for protecting our rights (for example, courts, debt collection entities, bailiffs) or for complying with our law enforcement obligations.

Our stores are fitted with CCTV. When you visit our stores, you will be captured on our CCTV. The legitimate basis for our use of CCTV is our legitimate interest. The aim of CCTV is to protect our employees and customers, and to protect our, our employees’ and our customers’ belongings against loss, destruction or damage, to prevent damage, and to identify the persons responsible for any damage.

Who else has access to your data?

In addition to the other persons named in these terms and conditions, all Sokisahtel OÜ employees and authorized persons may gain access to your data during the performance of their work tasks, as well as IT, accounting, marketing, and other support service providers, credit institutions and other persons to whom the provision of data is required for the aims specified in these terms and conditions, or to which we are required by law to provide data (in particular public authorities).

Sokisahtel OÜ and our partners to whom we provide your data are required to maintain the confidentiality of your data. We will not release your data to persons not mentioned in these terms and conditions without your consent or request unless we are obliged to do so by law.

Sokisahtel is the entity responsible for processing personal data. Sokisahtel OÜ forwards personal data required for making payments to the authorised processor Maskekeskus AS.

How long will we keep your data?

We will keep your personal data for as long as we need it to execute the contract, and after that, for as long as our contractual relationship may still lead to claims, or until the retention of data is mandatory for us (generally up to 3 years after the termination of the contract). For more information on storing your personal data, please contact us using the contact details below.

What are your rights?

You always have the right to contact us to gain access to personal data about yourself, and to find out which of your data, for what purposes and how we process, to request the correction of inaccurate data, deletion of unnecessary data, and, in justified cases, restrict what operations we can carry out with your data, or submit other objections. If you have given us consent to process your personal data for some purpose, you may at any time withdraw your consent and we will immediately terminate the corresponding operations, unless we have other legal basis for processing the data. You can opt out of receiving newsletters, offers, reminders, and other promotional messages at any time by following the instructions in the email. You also have the right to obtain personal data that you have submitted to us in a machine-readable format and request its transfer to another organization. Please contact Sokisahtel OÜ for further inquiries using the contact details below. If you have any complaints about how we use your data, you have the right to file a complaint with the Data Protection Inspectorate.

Modifying the Terms and Conditions

Sokisahtel OÜ may, at its discretion, amend these Terms and Conditions by publishing the relevant information on the www.sokisahtel.net website. The current Terms and Conditions are always available on our website. You have the right to object at any time to the processing of your personal data on the basis of our legitimate interest.

If you have any questions or complaints, please contact us:

Sokisahtel OÜ

Pärnu mnt 146, Tallinn

11317, Estonia

www.sokisahtel.net