Personal Data Privacy Policy of Panamir Online Store
Your privacy and the security of your personal data are important to us. By using the online store at https://panamir.com/shop/ (hereinafter referred to as the “webshop”), the customer agrees to the processing of their personal data under the conditions set forth in this document (hereinafter referred to as the “Privacy Policy”).
General Conditions
Personal data refers to any information about an identified or identifiable natural person. Processing of personal data refers to any operation performed on personal data, such as collection, recording, organization, storage, alteration, disclosure, access provision, querying, making extracts, use, transmission, cross-use, combination, closure, deletion, or destruction, or any combination of the aforementioned operations, regardless of the methods and tools used. Processing of personal data is necessary for the operation of the webshop services; without it, the use of webshop services is not possible. The webshop uses the personal data entered by the buyer (such as name, phone number, address, email address, bank details) only for processing the order and delivering the goods to the buyer. The Privacy Policy complies with the General Data Protection Regulation of the European Union and the relevant legislation of the Republic of Estonia. The controller of personal data is: Panamir OÜ, registration number 11458825, address: Rotermanni tn 18/1-402, Kesklinna linnaosa, 10111 Tallinn, email address: sales@panamir.com Panamir OÜ processes the data of its customers and other persons according to the principles set out below, primarily:
- Personal data is collected to the minimum possible extent;
- Personal data is used solely for the purpose of providing services, selling and delivering goods, concluding and fulfilling contracts, identifying individuals, contacting individuals, and promoting our services. We have implemented technical and organizational measures to protect your personal data against loss, alteration, theft, and unauthorized access. Data is accessible only to authorized persons. The terms of the Privacy Policy do not apply to the processing of data of legal persons, including data relating to an authorized representative of a legal person acting as a business entity.
Purposes of Data Collection and Processing
We need personal data for:
- Creating and managing your user account;
- Responding to your inquiries and providing the necessary information;
- Concluding contracts and fulfilling contractual obligations;
- Delivering, transferring, and returning purchased goods;
- Providing the best customer support;
- Resolving any issues that may arise;
- Conducting billing.
Direct Marketing
What Data Is Collected?
We collect and store the following personal data for the purposes listed below:
- For identifying the customer: First and last name; phone number;
- For communication: phone number; email; address;
- For delivering goods: delivery address;
- For verifying payments and refunding amounts paid for returned goods: payment method details, bank account, amounts paid.
Automatically Recorded Information
When visiting the webshop, general information is automatically and anonymously recorded that is not associated with your personal identity, such as the name of the internet service provider, the webpages you visited before visiting Panamir OÜ’s webshop, the information you searched for/downloaded from the Panamir OÜ website, the date and time you visited the Panamir OÜ webshop, and information about the operating system and browser version used. Such data is collected and analyzed anonymously and is used solely to make the Panamir OÜ webshop more attractive and to improve content and functionality. This data is not processed for other purposes and is not shared with third parties.
Cookies
A cookie is a small text file that a web server sends to the user’s web browser and that is stored on the user’s computer hard drive, allowing the user’s preferences, such as font size, communication language, device information, visit statistics, etc., to be remembered. All web browsers are set by default to accept cookies, but browser settings can generally be changed to refuse cookies entirely, block third-party cookies, or notify the user of each cookie sent. Panamir OÜ uses the following cookies:
- Session cookies (temporary cookies) that are used to enable the use of the service.
- Persistent cookies (stored on the user’s computer after closing the web browser) that are used to remember customer choices in the Panamir OÜ webshop. Specifically, Panamir OÜ uses:
- Analytical cookies that collect information on how the website is used. For example, which content pages are visited most often or what visitors search for on the website, etc. These cookies do not collect information that directly identifies the website user. This includes, for example, cookies from Google Analytics and Hotjar.
- Third-party cookies, such as YouTube and Google Maps. Location maps and videos are not displayed unless privacy terms are accepted. For this to be technically possible, we use the privacy_embeds cookie created by the Avada theme. The user has the right to refuse the storage of cookies on their computer. If desired, the user must change their web browser settings. When blocking cookies, the user must be aware that not all website functions may be available to them.
Sources of Personal Data Collection
From you directly We collect personal data that you provide yourself, such as when making a purchase from the webshop. Generally, we collect personal data directly from data subjects and with their consent. Additionally, we use automated data collection tools, including cookies and other tracking tools, to optimize the user experience on our website and provide better services to our customers.
Sharing Personal Data
Service Providers To fulfill our obligations to you, we share your personal data with companies that provide services to us, such as IT support, audit, and legal services. The webshop also transmits personal data to companies providing delivery services to deliver goods. These companies can process your personal data only according to our instructions and have no right to use it for other purposes. According to legislation and our cooperation agreement, they are obliged to process your personal data while ensuring its privacy. Law Enforcement, State, and Local Government Authorities In cases provided by law, we must transmit personal data to law enforcement agencies, state and local government authorities, bailiffs, bankruptcy trustees, and other persons entitled to personal data. We may also transmit your personal data to the aforementioned persons to protect our legal rights.
Where Do We Process Your Personal Data?
We always process personal data within the European Union and the European Economic Area. Personal data is not transmitted or processed in countries outside these regions.
How Long Is My Personal Data Retained?
Personal data is retained for up to 7 years according to the obligation to keep primary documents and contracts set out in § 12 of the Accounting Act of the Republic of Estonia. Personal data that you have provided to us via the website or social networks or by phone, email, or SMS, but have not made a purchase from the webshop, is deleted once a year. All personal data related to making purchases in the webshop and delivering goods is retained according to the Accounting Act for 7 years. After these periods, your personal data is securely deleted so that it can no longer be associated with you.
Your Rights
The data protection law provides you with several rights regarding the processing of personal data.
Access to Personal Data
You have the right to request access to personal data collected about you. A requested copy of the collected personal data is provided via email securely encrypted, adding you as a recipient using your personal identification code. If you lack the technical capability to open such a file or if it is not possible to add you as a recipient using your personal identification code, you can collect the requested documents in person. Document delivery takes place only at our office during working hours.
Correction of Personal Data
Furthermore, if you believe the information about you is incorrect or incomplete, you have the right to ask us to correct it.
Withdrawal of Consent
If you have given consent for your personal data to be used for direct marketing purposes, you have the right to withdraw your consent for personal data processing at any time. From May 25, 2018, you have the following rights.
Objection to Processing Based on Legitimate Interests
You have the right to object to the processing of personal data based on our legitimate interests. However, we will continue processing your data despite your objection if we have compelling legitimate grounds for continuing data processing. To exercise this right, please submit a written request to us.
Erasure
Under certain circumstances, you have the right to demand the complete or partial deletion of your personal data. This does not apply in cases where we are legally required to retain the data. To request deletion, please submit a written request to us.
Restriction of Processing
You also have the right to restrict the processing of your personal data at any time. To exercise this right, please submit a corresponding request to us.
Data Portability
You have the right to request the transfer of your personal data to another data controller (“data portability”). This right only covers the data you have provided to us with your consent or contract and where the processing is carried out automatically.
Updates and Changes
Data protection requirements may change, and Panamir OÜ will follow these changes. Please check periodically to stay informed of any updates or changes.
Right to Lodge a Complaint
If you are not satisfied with our actions in processing personal data or the responses to your inquiries, you have the right to file a complaint with the Data Protection Inspectorate. The Data Protection Inspectorate’s website is located at www.aki.ee