Handling of Personal Data

Essensa.ee online shop is the data collector and controller of Vilux OÜ, registration code: 10133601, address: Mäe tn 3-11 Kunda, Viru-Nigula parish, Lääne-Virumaa 44107, phone: +372 5608 8308 and e-mail: info@essensa.ee (hereinafter referred to as the trader).

Personal dataprocessed

• name;
• contact details: phone number, e-mail address;
• customer address and delivery address;
• bank account number;
• the cost of goods and services and payment details (including purchase history);
• customer support details;
• other information related to customer surveys and/or offers.

You can read more about it on this page , how cookies are used and stored.

How and why personal data is processed

Processing of personal data is carried out for the performance of a contract with a customer. For example, for accounting and consumer claims, personal data is processed to fulfil legal obligations.

Personal data is used both in the management of customer orders and in the delivery of goods.

Purchase history data (date of purchase, goods, quantity and customer details) to create an overview of the goods and services purchased , which is also used to identify consumer preferences.

A bank account number is required to return payments to customers.

If a consumer has a problem with the supply of goods or services, personal data is processed to help them , for example, the customer’s name, telephone number and e-mail address.

For the purposes of the online shop as an information society service and the compilation of statistics on internet usage , the IP address of the user of the online shop is processed. user’s web address or other web identifiers.

Transfers of personal data to processors

Personal data are confidential unless the obligation or the right to disclose them is provided for by law. The Merchant shall keep confidential all personal data relating to the Customer that has come to its knowledge in the course of the registration and use of the User Account and shall only make them available to third parties with the Customer’s consent. The user of the online shop agrees that the merchant may use his/her data to provide services acceptable to the customer, including the transmission of the customer’s data by the merchant to persons involved in the provision of the service. List of authorised processors:

IT service providers – where this is necessary to enable the functionality of the e-shop and the storage of data, personal data is transferred to IT service providers.

1. Elkdata OÜ

Suppliers/Logistics: to fulfil customer orders :

1. DPD
2. Itella
3. Omniva

Payment service providers – to pay for orders:

1. Swedbank
2. SEB
3. Danske
4. Luminor
5. LHV
6. Coop
7. Montonio Finance UAB
8. PayPal

Gathering statistics and data to improve the e-shop user experience

1. Google Analytics
2. Facebook

Data access and security

Personal data is stored on Elkdata OÜ servers, located in the territory of a Member State of the European Union or a country that has acceded to the European Economic Area. Data may be sent to organisations in the United States that have signed up to the Privacy Shield framework, or to countries where the European Commission has determined that the level of data protection is adequate.

The online shop implements the necessary organisational, physical and technological security measures, to protect personal data against accidental or unlawful loss, alteration, destruction or disclosure.

Transfer of personal data to the e-shop’s processors – The processing of personal data is governed by a contract between the e-shop and the processor. Processors must take the necessary precautions when processing personal data.

Data retention

All personal data will be removed when the customer’s account in the e-shop is closed, unless, where the data needs to be retained for accounting or customer dispute resolution purposes.

The individual purchase history is kept on file for three years if the purchase was made as a visitor to the online shop (without creating a user account).

Personal data will be kept on file until, until the claim has been settled or until the limitation period (three years) for payment or consumer disputes has expired.

Personal data relating to accounting are kept on file for seven years.

Account and data deletion

Personal data stored in the online shop together with a user account can be deleted via the online shop account management.

You can use the request for information form to request the deletion of other personal data. A response to a request for deletion must be received within one month, with a deadline for deletion where applicable.

Direct marketing and communication

If the consumer has given the necessary consent , an e-mail address or telephone numbermay be used to send direct marketing messages. If the customer does not wish to receive direct marketing messages, click on the appropriate link in the header/footer of the email or contact customer support.

You have the right to object at any time to the initial or subsequent processing of your personal data, including profiling in relation to direct marketing, by notifying Customer Support by e-mail, where personal data are processed for direct marketing purposes (profiling).

Resolving questions/complaints

Customer support (information on how to contact a trader’s customer support ) deals with disputes relating to the processing of personal data. The Estonian Data Protection Inspectorate (info@aki.ee) is the regulatory authority.