Privacy Policy
Privacy policy of Ebeebiraamat OÜ, reg no. 16542983, address Kihelkonna mnt 1-23, Kuressaare, 93810, (hereinafter referred to as "Ebeebiraamat") are an integral part of the sales contract when the customer provides Ebeebiraamat OÜ with personal data.
A customer is a person who has registered as a customer by creating a user account in the mobile application, including by expressing a wish to become a customer in connection with social media accounts.
1. Grounds for processing personal data
1.1. The Ebeebiraamat processes personal data in a manner that ensures appropriate security of personal data, including protecting personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Ebeebiraamat processes personal data of the customer only if and to the extent necessary to achieve the purposes specified below.
1.2. The Ebeebiraamat processes the customer's personal data if at least one of the following conditions is met:
- the customer has given his or her consent to the processing of his or her personal data for one or more specific purposes;
- the processing of personal data is necessary for the performance of a contract concluded with a customer or for the performance of pre-contractual measures at the customer's request;
- the processing of personal data is necessary for compliance with a legal obligation to which the European Data Protection Supervisor or processor is subject;
- the processing of personal data is necessary for the legitimate interests pursued by the European Data Protection Supervisor or by a third party, unless such interests are overridden by the interests of the data subject or by the fundamental rights and freedoms for which the personal data must be protected.
1.3. Ebeebiraamat processes personal data as a data controller when the data is collected for the purposes of Ebeebiraamat: when selling goods from the Ebeebiraamat e-shop and delivering goods to the customer, when registering a person as an Ebeebiraamat customer, when organising product warranty work, when fulfilling a customer's photo order.
1.4. Ebeebiraamat's legitimate interest in processing data means Ebeebiraamat's interest in providing the customer with a quality service that meets the customer's expectations and requirements, to meet direct marketing objectives and to increase sales. The processing of data based on legitimate interest takes into account the interests of the customer, including the customer's right to object to the processing of their data on the basis of legitimate interest.
The customer has the right to receive information from Ebeebiraamat regarding the establishment of a legitimate interest (including balancing) for the processing of data.
2. Personal data processed
The personal data of the customer that is processed may include the first name and surname, date of birth and/or personal identification number, telephone number and/or mobile phone number, e-mail address, delivery address, delivery method, payment method used to pay for the goods, bank account number, photo and text files, network identifiers (IP address), data about the goods purchased by the customer (purchase history) and customer support data.
3. Use of personal data and purposes of processing
3.1. Ebeebiraamat processes personal data in accordance with the requirements established by law when registering the customer through the website www.ebeebiraamat.ee and when registering the customer's data through social media accounts, including when issuing invoices, fulfilling and managing orders, delivering goods and fulfilling a legal obligation based on legitimate interest or legal obligation.
3.2. Depending on the service situation, all personal data of the customer may be processed for the purpose of providing the service.
3.3. Ebeebiraamat also processes personal data in order to fulfil a legal obligation, such as the settlement of consumer disputes, accounting, anti-money laundering obligations, etcetera.
3.4. The personal data of the customer (name, e-mail, telephone) are processed in order to resolve issues related to the sale of goods and provision of services.
3.5. Data on purchased goods (purchase history), including customer details, date of purchase, goods, quantity, are processed to produce statistics and analysis on purchased goods, services and customer preferences. On the basis of the data collected, Ebeebiraamat may, with the customer's explicit consent, make personalised offers of services and products to the customer.
3.6. The bank account number will be used to return payments to the customer when necessary.
3.7. In order to fulfill the customer's order for a photo book, Ebeebiraamat, as the controller, processes the customer's e-mail address and forwards the customer's photo and text files to the processor, who is Ebeebiraamat's partner in providing the photo service.
3.9. The customer's IP address and other network identifiers are processed by Ebeebiraamat for the purpose of providing the e-shop service and compiling e-shop usage statistics.
3.10. Ebeebiraamat uses cookies on its website, the function of which is to collect statistics on website traffic, to speed up the use of the website and to make it more convenient for users. This information helps Ebeebiraamat to update its website and make information more accessible to its customers (see also Ebeebiraamat OÜ's terms and conditions for the use of cookies).
4. Transfer of personal data to third parties
4.1. The Ebeebiraamat may disclose the customer's personal data to third parties providing services to the Ebeebiraamat with whom the Ebeebiraamat has concluded a contract and who are obliged to ensure appropriate safeguards for the processing of personal data: Ebeebiraamat shall transfer the customer's personal data to the provider of the parcel service and courier service to the extent necessary for the delivery of the goods; Ebeebiraamat shall transfer the photo and text material provided by the customer to the service provider only in order to fulfil the photobook service; Ebeebiraamat may transfer the customer's personal data to the IT and server service provider for the operation of the e-shop and data storage; to the direct marketing service provider for the organisation of direct marketing activities via e-mail with the customer's e-mail address, first name and birthday.
4.2. Ebeebiraamat may use the customer's personal data for the protection of its rights, in the course of audits or other checks and, in this connection, may transfer the customer's personal data to third parties to the extent necessary.
5. Security and data retention policies
5.1. Ebeebiraamat processes the customer's personal data in accordance with the legal requirements.
Ebeebiraamat takes all precautions (including administrative, technical and physical measures) to protect the personal data of the customer. Only authorised persons have access to process data.
5.2. Without the customer's prior consent, the Ebeebiraamat will not transfer, sell or disclose the collected personal data to third parties, unless there is a legal obligation to do so or these terms and conditions provide for such a right.
5.3. The Ebeebiraamat will retain personal data for as long as it is necessary for the purposes for which the processing is carried out, but no longer than the expiry of any statutory limitation periods.
For example:
The customer's purchase history will be kept until the customer's account is deleted at the customer's request. If the customer requests the deletion of the customer account, the customer's purchase history will also be automatically deleted, and thereafter the customer will only be able to exercise the rights under the warranty and similar rights when submitting a purchase invoice for the goods to the Ebeebiraamat.
The data of the registered customer will be stored until the customer account is deleted at the customer's request. The data of deleted customer account logs will be stored for 18 months after the deletion of the customer account in the restricted access customer account creation and deletion logs database.
If necessary, it is also possible to delete the customer's data from this database more quickly, but then it is no longer possible to verify the history of the customer's account, i.e. that the customer has ever provided the Ebeebiraamat with personal data and that the Ebeebiraamat has removed this data from its databases.
In the case of disputes relating to payments or consumer disputes, personal data will be kept until the claim is settled or the limitation period expires.
5.4. If the customer suspects that his/her personal data has been handled in a manner contrary to the terms of the Privacy Policy of the Ebeebiraamat and/or there is a risk that the data has been leaked to unauthorized persons, we ask the customer to immediately notify the Ebeebiraamat of this incident by e-mail to info@ebeebiraamat.ee.
6. Changes to personal data
You can change your personal data in the profile view of the Ebeebiraamat mobile application or by sending a digitally signed application to info@ebeebiraamat.ee.
7. Withdrawal of customer consent
If the processing of personal data is carried out with the consent of the customer, the customer has the right to withdraw his or her consent. In the event of withdrawal of consent to the processing of personal data, the customer will not be able to use the registered account until new consent is given. The Ebeebiraamat treats a request for deletion of data as a request to terminate a customer account.
8. Direct marketing
With the customer's explicit consent, the Ebeebiraamat may use the customer's e-mail address to send direct marketing communications and newsletters. To do this, the customer must give their consent, for example, when making a purchase in the e-shop or at any time by logging in to their customer account and changing their newsletter preference, whereby the customer gives their consent to receive offers and newsletters from the Ebeebiraamat by e-mail. All offers and newsletters will be forwarded on behalf of the Ebeebiraamat.
If the customer does not wish to receive direct marketing notifications and newsletters, the customer must click on the hyperlink at the foot of the email sent by the Ebeebiraamat or change their preference in the customer account settings in the Ebeebiraamat mobile application.
9. Transfer, deletion and retention of customer personal data
9.1. The customer has the right to access his/her personal data at any time and to request the transfer, correction or deletion of such data, unless otherwise provided by law.
9.2. Upon closure of an Ebeebiraamat customer account, the customer's personal data, including the customer's entire purchase history, will be deleted, unless such data needs to be retained for the Ebeebiraamat's accounting purposes or for any other reason to protect the rights of the Ebeebiraamat or to comply with any other legal obligation.
9.3. In order to transfer or delete personal data at the request of the customer, the customer must send a signed application to the e-mail address of the E-book. info@ebeebiraamat.ee .
The Ebeebiraamat will respond to the Customer's request without undue delay, but no later than one month after receipt of the Customer's request.
9.4. The client's personal data is stored only in electronic form on servers located in Estonia and in the territory of a Member State of the European Union. Data may be transferred to countries where the level of data protection has been assessed as adequate by the European Commission.
10. Dispute settlement
For data protection related questions, please contact info@ebeebiraamat.ee.
The supervisory authority is the Estonian Data Protection Inspectorate, e-mail address info@aki.ee.
The Privacy Policy of the ebook is valid from 27.07.2022.
