PROCESSING OF PERSONAL DATA
Address: J. Köleri st 13, Tallinn, Harjumaa, 10150
Phone: +372 58 058 055
Pyramid Products OÜ is responsible for processing the personal data, and Pyramid Products OÜ transfers the personal data necessary for the execution of payments to the authorized processor Maksekeskus AS.
What personal data are processed?
• delivery address;
• bank account number;
• cost of goods and services and data related to payments (purchase history);
• customer support data.
Why personal data are processed
Purchase history details (date of purchase, goods, quantity, customer’s data) are used for preparing summaries of goods and services purchased and for analysing customer preferences.
The bank account number is used to reimburse payments to the customer.
Personal data such as email, phone number and the customer’s name are processed to handle any issues relating to the provision of goods and services (customer support).
The IP address or other web identifiers of a user of the online shop are processed for the provision of the online shop as an information society service and for web use statistics.
Recipients of personal data
The name, phone number and email address are transmitted to the transport service provider selected by the customer. When the goods are delivered by a courier, the customer’s address is also transmitted together with the contact details.
If the accounts of the web shop are kept by a service provider, the personal data are transmitted to the service provider for performing accounting operations.
Personal data may be transmitted to IT service providers if this is necessary for ensuring the functionality of the online shop or for data hosting.
Personal data are processed for performing legal obligations (such as accounting and the settlement of consumer complaints).
Security and access to data
Personal data can be accessed by the staff of the online shop in order to settle technical issues related to the use of the online shop and to provide customer support.
The online shop takes appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Personal data are transmitted to the data processors of the online shop (such as the providers of transport and data hosting services) and processed under contracts concluded between the online shop and the processors. The processors must ensure appropriate safeguards when processing personal data.
Withdrawal of consent
For online purchases made without a customer account, the purchase history is stored for three years.
In the event of disputes concerning payments and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period.
Personal data needed for accounting purposes are stored for seven years.
The supervisory authority is the Estonian Data Protection Inspectorate (firstname.lastname@example.org).