Rekvi Online Store Privacy Policy
The Rekvi online store is committed to protecting the privacy of its customers and users. Accordingly, we have developed this Privacy Policy to govern the collection, use, disclosure, transmission, and storage of customer data. Our online activities comply with all relevant activities and European Union legislation, as well as the laws of the Republic of Estonia. Please take a moment to familiarize yourself with our privacy policy.
Data Collection and Usage
We are the sole owners of the information collected on this website. We only have access to the information that you voluntarily provide to us via email or other direct contacts. We do not sell or rent this information. We use the information about you to respond to the reason you contacted us. We will not share your information with third parties outside our organization unless necessary to fulfill your request. In the future, we may contact you via email to inform you about special offers, new products or services, or changes to this Privacy Policy unless you have requested otherwise.
Collection of Other Data
We also collect non-personalized data – information that cannot be directly linked to a specific person (gender, age, language preferences, location). We may also gather information about customer actions on our website. This information is collected and used to provide customers with more useful information and to understand which parts of the website, products, and services are of the most interest. In this Privacy Policy, aggregate data is treated as non-personal.
Data Usage and Storage
With the collected personal data, we may inform customers about new products, campaigns, and upcoming events in the online store. A customer who does not wish to be on our mailing list or receive notifications about products that may interest them can remove themselves from the target audience at any time. We also use collected personal data for product delivery and fulfilling obligations to the customer. By agreeing to the terms of the privacy policy, the buyer consents to the automatic processing of their data by the online store. Consent can always be withdrawn through our website or by submitting a written form. Statements or withdrawal of consent do not have retroactive effect.
To better serve customers, the online store may disclose information about individual users to a third party that provides services to the online store and is contractually obligated to keep this information confidential. A third party may be, for example, our partner responsible for transporting goods sold in the online store. Customer personal data is stored in the online store until the provision of services and offers is terminated. Data collected that the online store is required to retain according to legislation (e.g., accounting data) is stored in accordance with legal requirements.
Data Protection and Security
The online store takes all precautions (including administrative, technical, and physical measures) to protect the customer’s personal data. Only authorized personnel have access to data modification and processing. The customer has the right to demand the cessation of data processing, information about data usage, and data transfer to themselves or a third party in a publicly accessible format. To prevent unauthorized data use and protect customer rights, requests can only be submitted in a form allowing the identification of the applicant (with a digital or personal signature at the office). We reserve the right to respond to such requests within 30 days. All information obtained during visits to the online store and making purchases will be treated as confidential. Payment for the online store is processed outside the online store environment through Maksekeskus AS.
Personal Data Processing
The responsible processor of personal data for the Rekvi online store is Rekvi OÜ (registration code: 10057082), located at Punane 56B, LADU 5, 13619 Tallinn. If you have questions, you can contact us by phone at +3726363659 or send an email to rekvi@rekvi.ee.
What Personal Data Is Processed?
- Name
- Phone number and email address
- Delivery address of the product
- Bank account number
- Cost of goods and services and payment-related data (purchase history)
For What Purpose Is Personal Data Processed? Personal data is used to manage customer orders and deliver goods. Purchase history data (purchase date, products, quantity, customer data) is used to compile reviews of purchased goods and services and analyze customer preferences. The bank account number is used for refunding customer payments. Personal data, such as email, phone number, and customer name, is processed to address issues related to providing goods and services (customer support). IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and to compile online usage statistics.
Legal Basis Processing of personal data is carried out for the purpose of fulfilling a contract concluded with the customer. Processing of personal data is carried out to fulfill legal obligations (e.g., accounting and resolution of consumer disputes).
Recipients of Transferred Personal Data Personal data is transferred to the customer support service of the online store to manage purchases and purchase history, as well as to address customer issues. The name, phone number, and email address will be sent to the chosen customer’s transportation service provider. In the case of courier delivery, in addition to contact information, the customer’s address will also be specified. If the online store is accounted for as a service provider, personal data will be transferred to the service provider for accounting purposes. Personal data may be transferred to information technology service providers if necessary for the functionality of the online store or data hosting.
Security and Access to Personal Data
Personal data is stored on servers owned by Zone Media OÜ, located within the territory of a European Union member state or a country that has joined the European Economic Area. Data may be transferred to countries whose data protection level has been assessed by the European Commission as adequate and to American companies affiliated with the Privacy Shield system. Employees of the online store have access to personal data and may access it to resolve technical issues related to the use of the online store and provide customer support services. The online store implements appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure. The transfer of personal data to authorized processors of the online store (such as transportation service providers and data hosting) is based on agreements concluded with the online store and authorized processors. Authorized processors are required to ensure adequate security measures when processing personal data.
Access and Correction of Personal Data
Access to personal data and making corrections to the user profile of the online store can be done by the user. If a purchase was made without a user account, access to personal data can be obtained through customer support.
Withdrawal of Consent
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw the consent by notifying customer support via email.
Storage of Personal Data
When a customer’s account in the online store is closed, personal data is deleted, except where such records need to be kept for accounting purposes or to resolve consumer disputes. If a purchase in the online store was made without a customer account, the purchase history will be stored for three years. In cases of payment-related disputes and consumer disputes, personal data will be stored until the claim is satisfied or the statute of limitations expires. Personal data required for accounting purposes is stored for seven years.
Deletion of Personal Data
To delete personal information, contact customer support via email. A response to a deletion request must be provided no later than one month, specifying the data deletion period.
Transfer of Personal Data
In response to an email request for the transfer of personal data, a response will be provided within one month. The customer support service will identify and notify you of the personal data that needs to be transferred.
Direct Marketing Communications
Email addresses and phone numbers will be used to send direct marketing messages if the customer has given consent. If the customer wishes to receive direct marketing notifications, they must select the appropriate link in the email footer or contact customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object to the initial and further processing of their personal data, including direct marketing profiling, by notifying customer support via email (this information must be clear and separate from any other information).
Dispute Resolution
Disputes related to the processing of personal data are resolved through the customer support service at +3726363659 or via email at rekvi@rekvi.ee. The supervisory authority is the Data Protection Inspectorate of Estonia (info@aki.ee).
Terms and Changes to the Privacy Policy
By using the online store, including making purchases and subscribing to newsletters, you have read and agreed to these principles and conditions. We reserve the right to change the general terms and conditions of the privacy policy if necessary, but we make every effort to keep our privacy policy current and available to you on our website. If you have any questions or concerns about this Privacy Policy or data processing, please send an email to rekvi@rekvi.ee.
You always have the right to contact the Data Protection Inspectorate or the court to protect your data. The Data Protection Inspectorate is a government institution that you can also contact for consultation or assistance regarding personal data protection issues.