Privacy Policy and Personal Data Processing
The responsible processor of the personal data of the online shop kalmula.ee is Kalmula OÜ, registry code 16897989, registered address in Liivamäe 3, Tallinn 10132, Estonia (hereinafter referred to as “Kalmula“) which transmits the personal data necessary for making payments to the authorized processor Montonio Finance UAB.
By placing an order, you will provide Kalmula OÜ (hereinafter referred to as "us" or "Kalmula") with the following information about you:
Given name(s), surname, an e-mail address and phone number.
The Purpose for Which Personal Data is Processed
Personal data is used to manage customer orders and provide services.
Purchase history data (date of purchase, items, quantities, customer details) is used to prepare an overview of purchased products and services and to analyze customer preferences.
The bank account number is used to refund the customer any payments performed by the latter.
Personal data, such as phone number, e-mail or customer name are processed, to resolve issues related to the delivery of products and services (customer support).
The online shop user IP address or other network identifiers are processed to provide the online shop as an information society service and to generate web usage statistics.
Legal Basis
Personal data are processed for the purpose of executing the contract concluded with the customer.
The processing of personal data occurs in order to perform a legal obligation (e g. accounting and settlement of consumer disputes).
Recipients to Whom Personal Data is Transmitted
Personal information is passed to online shop customer support to manage purchases and purchase history, and to resolve customer issues.
Since the online shop is accounted for by the service provider, personal information is transferred to the service provider for accounting purposes.
Personal data shall be transmitted to the payment service provider for the purpose of performance of payments.
Personal information may be transferred to information technology service providers, if this is appropriate, to ensure the functionality of the online shop or data hosting.
Security and Data Access
Personal data is stored on Zone Media OÜ servers located in the territory of a Member State of the European Union or countries that have joined the European Economic Area framework. The data may be transferred to countries that have been assessed by the European Commission as having an adequate level of data protection and to any US companies that are affiliated with the Privacy Shield framework.
Access to personal information is available to online shop employees who can access personal information to resolve technical issues related to the use of the online store and to provide customer support.
The online shop applies appropriate physical, organizational and IT security measures to protect personal information from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.
The transfer of personal data to authorized processors of the online shop (e.g. data hosting) is subject to contracts between the online shop and the authorized processors.
The respective processors shall undertake to provide appropriate security measures for the processing of personal data.
Access and Rectification of Personal Data
Personal information can be accessed via customer support.
Withdrawal of Consent
In the event in which the processing of personal data is based on the customer's consent, the customer has the right to withdraw his / her relevant consent, by informing the customer support via an e-mail.
Data Preservation
The customer's purchase history is preserved for three years. In the event of disputes concerning payments and consumer disputes, personal data shall be retained until the request has been performed with or until the expiry period will have ended. The personal data necessary for accounting purposes shall be preserved for seven years.
Deletion
The customer support is required to be contacted via e-mail to delete any personal information.
The request for deletion shall be replied to within no later than the passing of one (1) month and the period for deletion shall be specified.
Data Transfer
Requests for the transfer of personal data by e-mail shall be replied to within a maximum of one (1) month.
The customer support shall identify and inform you of any personal data that is subject to transfer.
Direct Marketing Notices
The e-mail address shall be used to send direct marketing notices, if the customer has given their consent to do this. In the event in which the customer does not wish to receive any direct marketing notices, either the appropriate reference in the footer of the e-mail must be selected or the customer support must be contacted.
In case the personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profiling analysis for direct marketing purposes, by notifying customer support via an e-mail (the relevant notice shall be submitted in a clear manner and separated from any other information submitted).
Settlement of Disputes
Disputes related to the processing of personal data are resolved via the customer support office (info@kalmula.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
Cookies
We use cookies on our website. These include:
- mandatory cookies, which do not allow the identification of a natural person and are necessary for the functioning of the website; and
- optional cookies that we use to analyze website traffic, deliver customized content and advertisements, and provide social media capabilities.
In all of this, we may share information about the usage of the website with any third parties, including our social media and advertising partners and analysts, who may combine the data with other data available to them.
We ask for consent to the use of optional cookies from each visitor to the site. In the absence of such consent, we will not use cookies that allow or may permit the identification of natural persons.