Privacy Policy

1. Processing of personal data

The controller of personal data of the equisolvbaltic.eu online shop is RemedyBaltic OÜ (registration code 16419184), tel +372 53484300 and e-mail info@remedybaltic.eu.
What personal data is processed
* name, telephone number and e-mail address;
* delivery address;
* bank account number;
* the cost of goods and services and payment details (purchase history);
* customer support data.

Purpose for which personal data are processed

* Personal data is used for the management of customer orders and delivery of goods.
* Purchasing history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased and to analyse customer preferences.
* Bank account number is used to refund payments to the customer.
* Personal data such as e-mail, phone number, customer name, are processed to resolve issues related to the provision of goods and services (customer support).
* IP address or other network identifiers of the user of the webshop are processed for the purpose of providing the webshop as an information society service and for web usage statistics.

2. Legal basis
The processing of personal data is carried out for the purposes of the performance of a contract concluded with a customer.
The processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).
Recipients to whom personal data are transferred
The personal data are transferred to the online shop's customer support for the management of purchases and purchase history and for the resolution of customer problems.
The name and telephone number will be transmitted to the transport service provider chosen by the customer and/or to the supplier of the goods if the supplier is the sender of the goods. In the case of goods delivered by courier, or if the customer orders the goods to a post office, the customer's address will be transmitted in addition to the contact details.
If the accounting of the online shop is carried out by the service provider, the personal data will be transmitted to the service provider for accounting purposes.
Personal data may be transferred to information technology service providers where this is necessary to ensure the functionality or data availability of the online shop.

3. Security and access to data
Personal data is stored on the servers of Veebimajutus.ee, which are located in the territory of a Member State of the European Union or in the territory of a country that is a member of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies that have signed up to the Privacy Shield framework.
Access to personal data is granted to the employees of the online shop who can access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support services.
The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
The online shop is the controller of personal data, the online shop transfers personal data necessary for the execution of payments to the processor Montonio Finance OÜ.
The transfer of personal data to the processors of the online shop (e.g. the transport service provider and data storage) is subject to agreements between the online shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.

4. Access and rectification of personal data
Personal data can be accessed and corrected in the user profile of the online shop. If a purchase has been made without a user account, personal data can be accessed via customer support.

5. Withdrawing consent
Where the processing of personal data is based on the consent of the customer, the customer has the right to withdraw his consent by informing Customer Support by e-mail.

6. Personal data will be deleted upon closure of the online shop's customer account, except where such data need to be kept for accounting purposes or for the settlement of consumer disputes.
If a purchase has been made in the online shop without a customer account, the purchase history will be kept for three years.
In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires.
Personal data necessary for accounting purposes will be kept for seven years.

7. Deletion
In order to delete personal data, please contact customer support by e-mail. A reply to the deletion request will be sent within one month at the latest, specifying the period of deletion.

8. Transfer
Requests for transfer of personal data made by e-mail will be answered within one month at the latest. The Customer Support will verify the identity and notify the personal data to be transferred. 

9. Direct marketing communications
The e-mail address and telephone number will be used to send direct marketing communications if the customer has given his consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the footer of the e-mail or contact customer support.
Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his/her personal data, including profiling in relation to direct marketing, by informing customer support by e-mail (this information must be provided clearly and separately from any other information).

10. Dispute resolution
Disputes relating to the processing of personal data will be settled by means of customer support (e-mail: info@remedybaltic.eu). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).