Processing of personal data
The personal data controller of the web store Wanderlust.ee is Wanderlust Matkad OÜ (registry code 14818951) that is located at Keskväljak 12, Kuusalu 74601, Harjumaa. Wanderlust Matkad OÜ transmits personal data necessary for making payments to its processor Maksekeskus AS.
Phone +372 5622 6502 and e-mail [email protected]
What kind of personal data is processed
− name, phone number and e-mail;
− delivery address of goods;
− bank account number;
− cost of products and services and data related to payment (purchase history);
− customer support information.
Purposes for which the personal data is processed
Personal data is processed to manage customer orders and deliver the goods. The purchase history data (purchase data, goods, amount, customer data) is used to create an overview of purchased goods and analyse customer preferences. The bank account number is used to issue customers refunds.
Personal data like e-mail, phone number and name of the customer is processed with the purpose of solving issues regarding the provision of services (customer support).
The IP-addresses or other online identifiers of web store users are processed to provide a web store service as an information society service and to gather web usage statistics.
Processing of personal data
The personal data is processed with the purpose of carrying out an agreement concluded with the customer. Personal data is processed to fulfil a legal obligation (e.g. for accounting purposes and solving customer disputes).
Legal grounds
Personal data is transmitted to the customer support of the web store for the purpose of managing purchases and purchase history and solving customer issues. The name, phone number and e-mail address is transmitted to the transportation service provider selected by the customer. In case of a courier delivery, the address of the customer will also be transmitted in addition to the contact information.
If the accounting of the web store is managed by a service provider, the personal data will be transmitted to the service provider for the purpose of making accounting operations. The personal data may be submitted to providers of information technology services if it is necessary to assure the functionality of the web store or data hosting.
Security and access to data
The personal data is stored on the servers of Zone Media OÜ that are located on the territory of a European Union Member State or states that are members of the European Economic Area. The data may be transmitted to countries that the European Commission has deemed to have a sufficient level of data protection and to companies of the United States who have joined the Privacy Shield framework.
The personal data is available to the web store employees who can access it for the purpose of solving technical issues regarding the use of the web store and to provide customer support services.
The web store uses appropriate physical, organisational and information technology security measures to protect the personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
The personal data is transmitted to authorized employees (e.g. transportation and data hosting service providers) on the basis of contracts concluded by the web store and the authorized employees. The authorized employees shall ensure that relevant protective measures are used while processing the personal data.
Access to and rectification of personal data
The personal data can be accessed and rectified via the user profile in the web store. If a purchase has been made without a user account, the personal data can be accessed by the customer support.
Withdrawal of consent
If the personal data is processed on the basis of the consent of the customer, the customer has the right to withdraw their consent by notifying the customer support of such a decision by e-mail.
Storage
Upon the closure of a customer account in the web store the personal data is erased, with the exception of it being necessary to store such personal data for accounting purposes or solving customer disputes.
If a purchase in the web store has been made without a customer account, the purchase history will be stored for three years. In the event of payment related or customer disputes, the personal data will be stored until a claim has been fulfilled or the limitation period ends.
The personal data necessary for accounting will be stored for seven years.
Erasure
The personal data is erased upon a request communicated by the customer to the customer support via e-mail. We will reply to the erasure request within one month and specify the period for the erasure of the personal data.
Data portability
We will reply to an application requesting the transfer of the personal data within one month. The customer support will establish the identity and notify the applicant of the personal data to be transferred.
Direct marketing messages
The e-mail address and phone number of the customer is only used for the purpose of sending direct marketing messages if the customer has given their respective consent. If the customer does not wish to receive direct marketing messages, they should use the link in the footer of an e-mail or contact the customer support.
If the personal data is processed for direct marketing purposes (profiling), the customer has at any time the right to object to initial and further processing of the personal data, including to profiling in relation to direct marketing, by notifying the customer support by e-mail.
Solving disputes
Disputes connected to processing of personal data are solved via the customer support.
Phone +372 5622 6502 and e-mail [email protected] The supervisory authority is the Data Protection Directorate ([email protected]).