Overview
1 The controller of the personal data of the online shop Dooziewear is Dooziewear OÜ (registry code 16245695) – located at Mäe, Pärnu, Pärnu county, Estonia; email info@dooziewear.com
1.1 This Privacy Policy governs the principles governing the collection, processing and storage of personal data.
1.2 Dooziewear reserves the right to make changes to the Privacy Policy. These changes are reflected on our website´s page “PRIVACY POLICY”.
1.3 For the purposes of the Privacy Policy, customer is a person whose personal data is processed by a data processor/Dooziewear.
1.4 For the purposes of the Privacy Policy, a customer is anyone who purchases goods from Dooziewear website.
1.5 Dooziewear follows the principles of data processing provided by legislation, among other things, the data processor processes personal data legally, fairly and securely. The data processor is able to confirm that personal data have been processed in accordance with the legislation.
1.6 Personal data is stored in servers of Zone.ee which are located on the territory of a member state of the European Union or states of the European Economic Area. Data may be forwarded to states whose level of data protection is sufficient according to the European Commission or to a company of a third state to which a safeguard specified in articles 46 or 47 or in subsection 49 (1) of the GDPR has been applied.
Collecting, processing and storage of personal data
2. The personal data Dooziewear collects, processes and stores is collected electronically, mainly via the website and e-mail.
2.1 By sharing her/his personal data, the customer grants Dooziewear the right to collect, organize, use and manage personal data for the purposes defined in the privacy policy, which the customer shares directly or indirectly with Dooziewear when purchasing goods on the website.
2.2 The customer is responsible for ensuring that the information provided by her/him is accurate, correct and complete. Knowingly providing false information is considered a violation of our Privacy Policy. The customer is obliged to immediately notify us of any changes in submitted personal data.
2.3 Dooziewear shall not be liable for any damage caused to the customer or third parties as a result of the provision of false information by the customer.
What personal data is processed
– name, e-mail, phone number
– delivery/billing address
– bank account number
– payment card details
– cost of order and data related to payments (purchase history)
– device information
– IP address
– Our page accounts usernames and passwords
3. In addition to the above, Dooziewear has the right to collect data about the customer that is available in public registers.
3.1 Pages on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Purposes of the processing of personal data
4. The purpose of processing personal data is to fulfil the agreement entered into with the customer (managing the customer’s orders, delivery, returning goods and reimbursing payments).
4.1 Personal data are processed in order to fulfil legal obligations (e.g. for accounting).
4.2 The processing of personal data, i.e. the collection of purchase history data for the purposes of resolving potential consumer disputes, is necessary due to the controller’s legitimate interest
4.3 Customer’s name, e-mail, phone number and delivery address is used to process customer’s orders and for delivering goods. In addition, we will send newsletters to the customer’s e-mail if the customer has given her/his approval. The customer is able to opt out of offers and newsletters sent to their e-mail address at any time by letting us know via e-mail info@dooziewear.com or by following the instructions in an e-mail containing an offer.
4.4 Where personal data are processed for direct marketing purposes (e-mail newsletters), the customer has the right to object at any time both to the initial and further processing of their personal data, including profiling related to direct marketing, by notifying us at info@dooziewear.com
4.5 Personal data such as the e-mail address, telephone number and name of the customer are processed to handle any issues relating to the provision of goods and services (customer support). E-mail is also used in order to forward invoices and the telephone number is used to notify the customer about their goods arriving in the parcel locker.
4.6 We collect device information to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
4.7 Bank account number and payment card details are used to pay for orders through Maksekeskus AS.
4.8 Purchase history data (date of purchase, goods, quantity, customer’s personal data) is used for accounting purposes and for creating analytical summaries of orders.
4.9 If the accounts of the web shop are kept by a service provider, the personal data are transmitted to the service provider for performing accounting operations.
4.1.1 Web store’s service provider WordPress collects customer’s IP address to share ‘packages’ of data with each computer and use this for purposes like estimating taxes and shipping.
4.1.2 Dooziewear has the right to share customer’s personal data with third parties, such as authorized data processors, accountants, transport and delivery companies, payment service companies. CEO of Dooziewear is responsible processor of personal data and forwards the personal data necessary for making payments to the authorized processor to Maksekeskus AS. If you request a password reset, your IP address will be included in the reset email.
4.1.3 When processing and storing personal data of the customer, Dooziewear shall implement organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, loss, amendment or unauthorised access and disclosure.
4.1.4 Personal data are forwarded to processors (e.g. the transport service provider and data hosts) on the basis of contracts between the online shop and processors. Upon processing data, the processors are obliged to ensure the relevant safeguards in accordance with article 28 of the GDPR.
For how long we keep personal data
5. Dooziewear retains personal data for a sufficient period of time, but no longer than 3 years.
5.1 In case of return or dispute, personal data is stored until the process is satisfied.
5.2 Personal data stored for accounting purposes is kept for 7 years.
5.3 Upon closing the customer’s user account, his personal data is deleted.
Access to personal data
6. Personal data can be accessed via our customer support info@dooziewear.com
Customer have the right to withdraw/change his/her personal data by contacting us at info@dooziewear.com.
6.1 For erasure of the personal data, specify the erasure period and contact us at info@dooziewear.com.
6.1.1 Requests for erasure are responded to within one month and the period of erasure is specified. The response to the request will also indicate which personal data will not be erased, on which legal basis and why.
6.2 Requests to transfer personal data submitted via e-mail are responded to within one month. Dooziewear identifies the person and indicates which personal data is to be transferred.
Customer rights
7. Customer has the right to access and inspect their personal data.
7.1 Customer has the right to receive information about the processing of his personal data.
7.2 Customer has the right to supplement or correct inaccurate data.
7.3 If Dooziewear processes the customer’s personal data on the basis of customer’s consent, the customer has the right to withdraw the consent at any time.
7.4 Customer can contact the Dooziewear’s customer support at info@dooziewear.com to fulfill their rights.
7.5 The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).