Personal data collected and processed
- First name and surname of the customer.
- Customer phone number.
- Customer e-mail address.
- Information contained in e-mails sent or requests made by the customer.
- Customer’s bank account number.
- Cost of goods and services and payment details.
- Information exchange between the customer and GAZNET OÜ.
- Client IP address.
Purposes of processing personal data
The personal data collected about the Client under these Privacy Policy are processed solely for the purposes of providing the Service, enabling the provision of the Service, preparing Contracts and enabling the use of the Website.
- Personal data is used for the management of customer orders and the delivery of goods.
- Purchase history data is used to compile an overview of the goods and services purchased, to analyse customer preferences and, among other things, to resolve consumer disputes.
- The bank account number is used to return payments to the customer.
- Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services.
- Email is also used to send invoices and the telephone number is used to notify the parcel machine of the arrival of the goods.
- The IP address or other network identifiers of the user of the online shop are processed for the purpose of providing the online shop as an information society service and for the purpose of web usage statistics.
Legal basis for data processing
- The processing of personal data is carried out for the purposes of the performance of the contract with the customer (management of customer orders, delivery, return of goods and payments).
- The processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting).
- The processing of personal data is necessary for the purposes of the legitimate interests pursued by the controller.
- Data processing is carried out with the customer’s consent: for direct marketing purposes.
Sharing personal data
We will not disclose the Customer’s personal data to third parties, except in the following cases:
- The transfer of personal data to subcontractors or cooperation partners in connection with the provision of the service, where the transfer of data makes the provision of the service possible.
- As a result of a legal obligation to disclose or share the Client’s personal data (in particular for purposes provided for by law, such as a court order or for the purpose of preventing crime, protecting the life and health of the Client).
- To ensure compliance with the service.
- As a result of the sale of part or all of a business or the restructuring of a business. In this case, we will take all necessary measures to ensure the continued protection of the Client’s personal data.
- With the aim of improving and developing the Service. Third parties shall be considered processors for the purposes of the processing of personal data for the purposes set out above.
Storage and protection of personal data
- All personal data collected about the Client is stored on servers located in the European Union or European Economic Area countries.
- Personal data relating to the customer, which GAZNET Ltd uses for the provision of the service and for the execution of orders, shall be stored for a period of up to 10 years from the date on which the personal data concerned came into the possession of GAZNET Ltd, or until such time as any claims that may be brought on the basis of or in connection with such personal data have become time-barred. The basic accounting documents are kept for 7 years in accordance with the Accounting Act.
- Only our employees and members of our management bodies have access to the Customer’s personal data, and they are only entitled to use personal data in connection with the provision of the Service and the administration of the Website.
- We may have additional obligations to retain certain personal data as a result of applicable law.
Accessing and correcting personal data
Personal data can be accessed and corrected in the online shop’s user profile or via customer support. If the purchase has been made without a user account, you can access the personal data via the login. If the request for access is made by electronic means, the information shall also be provided by commonly used electronic means.
You have the right to request the restriction of the processing of your personal data if the data is inaccurate or incomplete or if your personal data is processed unlawfully.
The customer has the right to object to the processing of his/her personal data if he/she has reason to believe that there is no lawful basis for the processing of his/her personal data.
Deletion
In order to delete personal data, you must contact customer support by e-mail. A reply to the deletion request will be given within one month at the latest, specifying the period of deletion. The reply to the request will also indicate which personal data will not be deleted and on what legal basis and for what reason.
Direct marketing communications
The email address and telephone number will be used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the footer of the e-mail or contact customer support.
Dispute resolution
Disputes relating to the processing of personal data are resolved through customer support. info@gaznet.ee or by calling +372 56624955.
The supervisory authority is the Estonian Data Protection Inspectorate.