Privacy Policy

What personal data is processed
- name, telephone number and e-mail address
- delivery address
- bank account number
- the cost of goods and services and payment details (purchase history)
- customer support data
- IP address
 

Purposes for which personal data are processed
Personal data is used for the management of customer orders and the delivery of goods.
Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of the goods and services purchased, to analyse customer preferences and for the purposes of, among others, resolving consumer disputes.
The bank account number is used to refund payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed for the purpose of resolving issues related to the provision of goods and services (customer support). In addition, e-mail is used to send invoices and the telephone number is used to notify the arrival of goods at the parcel machine.
The IP address or other network identifiers of the user of the online shop are processed for the purpose of providing the online shop as an information society service and for web usage statistics.
 

Legal basis
The processing of personal data is carried out for the purposes of the performance of the contract with the customer (management of the customer's orders, delivery, return of goods and payments).
Processing of personal data for the performance of a legal obligation (e.g. accounting and settlement of consumer disputes).
The processing of personal data is necessary for the purposes of the legitimate interests pursued by the controller, which are the collection of purchase history data for the settlement of possible consumer disputes.
 

Recipients to whom personal data are transferred
The name, telephone number and e-mail address will be communicated to the transport service provider chosen by the customer. In the case of goods delivered by courier, the customer's address will be transmitted in addition to the contact details.
In the case of the accounting of the online shop by the service provider, the personal data will be transmitted to the service provider for the purpose of accounting operations.
Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality or data availability of the online shop.

​

Security and data access
Personal data is stored on servers located in the territory of a Member State of the European Union or in the territory of countries that are members of the European Economic Area. Data may be transferred to countries whose level of data protection has been judged adequate by the European Commission or to a third country undertaking for which a safeguard measure as referred to in Article 46 has been applied.
Access to personal data is granted to the employees of the online shop who can access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support services.
The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Transfers of personal data to the online shop's processors (e.g. transport service providers and data aggregators) are subject to agreements between the online shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.

Access and rectification of personal data
Personal data can be accessed and corrected in the user profile of the online shop. If a purchase has been made without a user account, the personal data can be accessed via the online shop. If the request for access to personal data has been made electronically, the information will also be provided through commonly used electronic means.
 

Withdrawal of consent
Where the processing of personal data is based on the consent of the customer, the customer has the right to withdraw the consent in the customer account settings or by informing customer support by e-mail.
 

Retention
When the online shop closes the customer's account, the personal data will be deleted, except for personal data (purchase history data) that need to be kept for accounting purposes or for the settlement of consumer disputes. In the event of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled.
settlement of the claim or the expiry of the limitation period. Personal data contained in the original accounting records are kept for seven years.
 

Restrictions
Customers have the right to request the restriction of the processing of their personal data if the data are inaccurate or incomplete or if their personal data are processed unlawfully.
 

Objections
The customer has the right to object to the processing of his/her personal data if he/she has reason to believe that there is no lawful basis for the processing of his/her personal data.
 

Deletion
In order to request the deletion of personal data, you should contact customer support by e-mail. A reply to the erasure request will be provided within a period of not more than one month, specifying the period for which the data should be erased.
The reply to the request will also indicate which personal data will not be deleted and on what legal basis and for what reason.
 

Transfer
Requests for transfer of personal data made by e-mail shall be answered within one month at the latest.
The customer support will identify the identity and notify the personal data to be transferred.

​

Direct marketing communications
The email address and telephone number will be used to send direct marketing communications if the customer has given their consent. If the customer does not wish to receive direct marketing communications, they should select the appropriate reference in the footer of the email or contact customer support.
Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his/her personal data, including profiling in relation to direct marketing, by informing customer support by e-mail.

Dispute resolution
Disputes relating to the processing of personal data can be resolved through customer support by sending an e-mail to info@artisanwool.com.
The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).