1. General provisions
1.1. This Privacy Policy governs the collection, processing and storage of personal data on the padellocus.com website operated by Tomand OÜ.
- Registration number: 16531308
- Address: Laki tn 15-206, 12915 Tallinn, Estonia
- Telephone: +372 58 23 76 76
- E-mail: info@padellocus.ee
1.2. The data processor is responsible for the protection of personal data in accordance with applicable legislation, including the European Union General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
1.3. This document supplements our data protection conditions, the full content of which can be found at https://padellocus.com/et/isikuandmete-tootlemine/.
2. Collection, processing and storage of personal data
2.1. Our website collects and processes personal data electronically, mainly through the website and e-mail.
2.2. The processing of data is carried out for the following purposes:
- Order management and delivery: we process customer orders, deliver goods and arrange refunds where necessary.
- Providing customer support: we contact customers to resolve technical issues, send invoices and other service-related questions.
- Purchasing history and analytics: data is used to document purchasing history, analyse customer preferences and resolve potential consumer disputes.
- Ensuring website performance and security: visitors' IP addresses and other network identifiers are automatically collected to ensure website performance and to provide statistics and analysis (we use Google Analytics and Yandex.Metrics and cookies).
2.3. The data to be collected include (to be completed, if necessary, according to the actual data set):
- First name and surname;
- Date of birth (if applicable);
- Phone number;
- E-mail address;
- Delivery address;
- Bank account number;
- Payment card details (if collected);
- Purchase history (date of purchase, details of goods/services purchased);
- Customer support communication data;
- Automatically collected IP address and other network identifiers;
- Data available from public registers (if applicable).
3. Legal principles and legal basis for processing
3.1. Our processing of your data is based on the following principles:
- Lawfulness, fairness and transparency: we process data in accordance with applicable law.
- Purpose-driven: data are only collected for specific and clearly defined purposes.
- Data minimisation: we only process the data that is necessary to achieve our objectives.
- Accuracy and timeliness of data: data are kept accurate and corrected where necessary.
- Retention limit: Data will be kept no longer than necessary for the purposes for which it is collected.
- Security: we implement appropriate technical and organisational measures.
3.2. The legal basis for the processing of data is based on Article 6(1)(a), (b), (c) and (f) of the GDPR.
4. Cookies and analytics
4.1. The website uses cookies and other tracking technologies to ensure that:
- Website performance and user experience;
- Collection of statistical data (Google Analytics, Yandex.Metrika);
- Displaying personalised content and ads (where appropriate, with user consent).
4.2. When cookies are used, the user is first presented with a notification where they can give their consent or refuse the use of cookies.
5. Sharing and transmission of data
- Providers of transport services: for the delivery of orders (first and last name, address, telephone number, etc.).
- Accounting service providers: for tax returns and other legal obligations.
- IT and web management service providers: to ensure website functionality and data availability.
- Customer support service providers: to resolve queries and provide technical support.
5.2. The transfer of data will be based on contractual measures and, where necessary, we will use the European Commission’s standard data protection clauses.
6. Security measures
- Encrypted connection for data transfer (HTTPS).
- Storing data on secure servers located in countries that are members of the European Union or the EU Economic Area.
- Restricting access - data is only accessible to staff who have a job to do.
- Firewalls, antivirus and regular backups.
- Regular internal audit and risk analysis.
7. Data retention and purposes of processing
7.1. Purpose of processing and retention periods
7.1.1. Security and safety
Personal data will be kept for security purposes in accordance with the time limits specified by law (for example, security log files will be kept in accordance with applicable requirements).
7.1.2 Processing of the order
The data relating to the order will be stored for up to 2 years after the order has been fulfilled to enable the resolution of consumer disputes and, where necessary, refunds.
7.1.3 Ensuring the functioning of the services of the e-shop
The data collected for the purposes of the functionality and technical support of the website will be stored for up to 2 years after the last use.
7.1.4. Customer administration
Customer administration and communication data will be stored for up to 2 years after the last transaction or for as long as the customer relationship with the Company continues (in addition, data may be stored for a longer period with the customer’s consent).
7.1.5. Financial activities and accounting
Financial data and data contained in accounting records are kept in accordance with the periods specified by law, usually 7 years.
7.1.6 Marketing
Data processed for marketing purposes will be stored for a maximum of 2 years, unless the processing continues with the consent of the customer. The customer has the right to restrict the processing for marketing purposes or to withdraw his consent at any time.
7.1. Purpose of processing and retention periods
7.2.1. Data will only be kept for as long as necessary to fulfil the purposes mentioned above or to comply with legal obligations.
7.2.2 For example, order data will be kept for up to 2 years and accounting records for up to 7 years.
7.2.3 Users may request the deletion of their data and will receive a response to their request for deletion no later than one month, explaining which data will not be deleted and why.
8. Rights of the data subject
Users (data subjects) have the following rights:
- Right of access to data: Request information about the data processed about you.
- Right to rectification: to request the rectification of inaccurate or incomplete information.
- The right to erasure ("right to be forgotten"): Request the erasure of your data where there is no lawful basis for the processing.
- Right to restriction of processing: request restriction of processing in certain situations.
- Right to data portability: Receive your data in a machine-readable format and give it to another data processor.
- Right to object: to object to the processing of data, in particular for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent given by the user, this consent can be withdrawn at any time.
To exercise your rights as a data subject, please contact Customer Support at info@padellocus.ee or call +372 58 23 76 76. It is also possible to lodge a complaint with the Estonian Data Protection Inspectorate(info@aki.ee).
9. Changes
10. Additional information
Further information on the processing of personal data and all technical details can be found in our Privacy Policy.
11. contact
For all questions, requests and exercise of rights related to the processing of personal data, please send:
- Telephone: +372 58 23 76 76
- E-mail: info@padellocus.ee
Padellocus.com
Our physical store is located in the Cool Padel hall. Akadeemia tee 47, Tallinn.
Entrance with door code 1199#.
Store opening hours:
Tue, Wed, Thu, Fri - 12:00 PM-7:00 PM
Sat, Sun - 11:00 AM-5:00 PM
Mon - Closed
Information
Tomand OÜ
Tel.: +372 58 23 76 76
Email: info@padellocus.com
Reg. code: 16531308
Address: Akadeemia tee 47, 12601 (in Cool Padel hall), Tallinn, Estonia