Privacy Policy

Protection of personal data, intellectual property and technical information

The terms of this privacy policy apply to AS PUUMARKET’s website (www.puumarket.ee) and stores. Puumarket collects and processes only those personal data that are necessary to serve the customer in stores and in the online ordering environment and to operate the customer loyalty program. Puumarket forwards direct marketing, campaign and discount offers to customers only if the customer has given their consent and it can be presented in a reproducible form. The customer has the right to withdraw the consent at any time.

Controller of personal data: PUUMARKET AS

• Reg.no: 10363212
• Väike-Männiku 11, 11216 Tallinn
• Phone: 6 559 232
• E-mail: puumarket@puumarket.ee

Personal data is data that Puumarket collects to provide the service, to identify the person, to contact the person to provide the service or to solve questions. Puumarket does not process sensitive personal data defined in the Regulation (EU) 2016/679 of the EUROPEAN PARLIAMENT AND COUNCIL (General Data Protection Regulation or GDPR or EU Regulation 2016/679).

Puumarket undertakes to protect the personal data of customers and users and their privacy. Puumarket’s activities on the Internet are in accordance with all relevant activities and the relevant legislation of the European Union and the laws of the Republic of Estonia, including REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL.

Puumarket implements all precautions (including administrative, technical and physical measures) to protect collected personal data. Only authorized persons have access to change and process data. The users of the database have undergone the necessary training for using the database.

Security

The principles of the Puumarket privacy policy regarding the collection, processing, use, publication, transmission, modification, forgetting and deletion of personal data are described below.

Personal data obtained during orders and purchases made in Puumarket AS stores, on the website and in the online service environment are treated as confidential information. The stated principles do not apply to the processing of data of legal entities and other companies/institutions, and do not include the processing of personal data on websites/service environments that are referred to on Puumarket’s websites/service environments (external links). The person representing the company (as a customer of the service) is not a natural person, because it is an authorized representative of a legal entity whose personal data processing is not regulated by REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL.

All Puumarket employees who come into contact with personal data are instructed to follow and use security measures in their work, concerning the servicing of Puumarket customers.

What kind of information will be collected

PUUMARKET AS processes the following personal data:

• personal identification number
• name
• adress
• phone number
• e-mail address
• information about purchases made by the customer and contracts concluded with the customer

Regarding to physical persons, the collected data is, if necessary, a personal identification number for identifying uniqueness, name, e-mail address, mobile phone, city and country for communication.

Regarding physical persons, the collected data is, if necessary, a personal identification number for identifying uniqueness, name, e-mail address, mobile phone, city and country for communication.

In order to process the data of legal entities, we collect the registration number, VAT number, name, country, address, e-mail addresses for contacting and sending invoices, names of contact persons representing the company and their e-mail addresses and contact telephone numbers.

When visiting Puumarket’s website, non-personalized technical data is collected about the visitor. In service environments (online ordering environment and stores), personal data is also collected for the provision of services and identification of persons.

At the checkout of Puumarket stores, data is collected in the course of registered purchase/sale transactions and from persons participating in the loyalty program to determine the discount price and identify the customer (in the sales system).

Data is also collected on the number of visitors to the website in order to improve and make the environment more comfortable for visitors based on this.

In the online ordering environment of Puumarket, personal data may be collected regarding subjects of interest to individuals (including shopping cart content, preferences, attitudes, behaviors, etc.) in order to improve the transmission of expected information and thereby improve the customer experience when consuming services and performing direct marketing.

The technical data collected on the website is limited to the Internet address (IP address) of the computer or computer network used, the software version of the computer’s web browser and operating system, the time of visit (time, date, year). IP addresses are not associated with personally identifiable information except for service environments where this is an additional security measure.

Storage, transmission of collected data and personal rights

Personal data related to personalized inquiries and/or transactions will be stored for up to 7 years from the last interaction with the service provider due to the obligation to certify transactions in the Accounting Act.

To whom can the collected data be forwarded?
Personal data processed by Puumarket may be transferred without the person’s consent only to an institution or a person who has a direct legal right to do so (for example, a court or pre-trial procedure) and a justified need.

Personal data processed by customers within the framework of the Puumarket service is treated as confidential, and the right to process, release or transmit this data belongs solely to the responsibility of the data owner (customer).

What rights does a person have to the collected data?

A private person has the right to familiarize himself with the data collected about him, to demand the correction of incorrect data, to demand the termination of the processing of his personal data and to exercise other rights arising from the Personal Data Protection Act.

By default, personal data is not disclosed, except if a corresponding confirmation for this has been obtained (participation in trainings/seminars/conferences).

All persons have the right to familiarize themselves with their personal data by contacting a sales office with a corresponding request or, having a user account, in the online service environment.

If a fix is possible, depending on the environment, it can be done immediately.

If the personal data cannot be changed or accessed, a request for obtaining or correcting the data must be submitted in a way that allows identification of the person. If possible, the data will be issued or corrected within 7 working days.

If you wish to opt out of direct marketing offers for all or some topics, you can do so immediately via the link in the footer of every marketing letter sent. The change takes effect immediately.

If there is (no longer) a legal basis for processing, disclosing or providing access to personal data, the termination of use or deletion of data, the termination of disclosure of data or the termination of access to data can be requested. For this purpose, an application should be submitted in a way that allows identification of the person.

Privacy Policy Terms and Changes

Puumarket reserves the right to change the terms of the privacy policy if necessary. Puumarket guarantees that regardless of any changes, the legal protection of customers’ personal data is always guaranteed.

Please send additional questions about personal data processing and other requests or statements related to personal data processing to the address puumarket@puumarket.ee.

If the customer finds that his rights have been violated during the processing of personal data, he has the right to appeal to the Data Protection Inspectorate or the court with a request to stop the violation.