Privacy Policy
The data controller for the Olea Vitalis online shop is Dinara Tadzijeva OÜ, registry code: 14586481, telephone: +372 56184769, and email: info@oleavitalis.com (hereinafter the "merchant").
What Personal Data Are Processed
- Name
- Contact information (telephone number, email address)
- Payer’s address and delivery address
- Bank account number
- Costs of goods and services and data related to payments (purchase history)
- Customer support details
- Other information related to customer surveys and/or offers
Purpose of Processing Personal Data
Personal data are processed to fulfill the contract concluded with the customer and for legal obligations (e.g., accounting and resolving consumer disputes).
- Order Management: Personal data are used for managing orders and delivering goods.
- Purchase History: Data such as purchase date, goods, quantity, and customer details are used to prepare purchase summaries and analyze customer preferences.
- Refunds: Bank account numbers are used to process refunds.
- Customer Support: Email addresses, telephone numbers, and customer names are used to address issues related to goods or services.
- Statistics: The IP address and online identifiers are processed to provide the online shop as a service and compile Internet use statistics.
Transmission of Personal Data to Authorized Processors
The merchant keeps customer data confidential and shares it with third parties only with customer consent or when required by law.
Authorized Processors
Suppliers (for order delivery):
- DPD
- Itella
- Omniva
- Venipak
Payment Service Providers (for order payments):
- Stripe
- Montonio
- Swedbank
- SEB
- Luminor
- LHV
- Coop
- Maksekeskus
- PayPal
Collecting Statistics:
- Google Analytics
- Tawk.to
Security and Access to Data
Personal data are stored on Vercel servers within the EU or EEA, or in countries deemed to have adequate data protection by the European Commission. Data may also be transmitted to U.S. companies under the Privacy Shield framework.
The online shop employs physical, organizational, and IT security measures to protect data from destruction, loss, modification, unauthorized access, or disclosure.
Authorized processors must ensure appropriate safeguards during data processing.
Inspection and Amendment of Personal Data
Personal data recorded in the online shop can be inspected or amended via the account management page. Visitors without an account can submit a query via email at info@oleavitalis.com.
Retention
- Account Closure: Personal data are deleted upon account closure, except where required for accounting or consumer dispute resolution.
- Visitor Purchase History: Retained for 1 year.
- Dispute Data: Retained until the settlement of claims or expiry of the limitation period (3 years).
- Accounting Data: Retained for 7 years.
Deletion
Personal data and user accounts can be deleted by submitting a request to info@oleavitalis.com.
Direct Marketing Messages
Direct marketing messages are sent to email addresses or phone numbers with customer consent. To opt-out, customers can select the relevant link in the email or contact customer support.
For objections to direct marketing or profiling, customers may notify customer support via email.
Resolution of Disputes
Disputes related to personal data processing are resolved through customer support. The supervisory authority is the Estonian Data Protection Inspectorate info@aki.ee.