Privacy policy

The person responsible for processing personal data on the online store www.omaart.ee is Omaart OÜ (registration code 12609924) located at Tuukri põik 6, Tallinn. Phone +372 605 9559 and email info@omaart.ee

What personal data is processed?

• Name, phone number, and email address
• Delivery address for goods
• Bank account number
• Cost of goods and services and related payment data (purchase history)
• Customer support data

For what purpose is personal data processed? Personal data is used for managing customer orders and delivering goods. Omaart OÜ transmits the necessary personal data to the authorized processor Esto AS for the execution of payments. Purchase history data (purchase date, goods, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences. The bank account number is used to return payments to the customer. Personal data such as email, phone number, customer name, are processed to resolve issues related to the provision of goods and services (customer support). The online store user's IP address or other network identifiers are processed for the provision of the information society service and for making web usage statistics.

Legal basis The processing of personal data occurs for the purpose of fulfilling a contract with the customer. The processing of personal data occurs for the fulfillment of a legal obligation (e.g., accounting and consumer disputes resolution).

Recipients to whom personal data is transmitted Personal data is transmitted to the online store's customer support for the management of purchases and purchase history and to resolve customer problems. The name, phone number, and email address are transmitted to the transportation service provider chosen by the customer. If the goods are delivered by courier, the customer's address in addition to contact details is also transmitted. Personal data may be transmitted to IT service providers if this is necessary for the functionality of the online store or data hosting.

Security and access to data Access to personal data is available to the employees of the online store, who can access personal data in order to resolve technical issues related to the use of the online store and to provide customer support service. The online store implements appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure. The transmission of personal data to the online store's authorized processors (e.g., transportation service provider and data hosting) occurs under contracts concluded with the online store and authorized processors. Authorized processors are obliged to ensure appropriate protection measures in the processing of personal data.

Accessing and correcting personal data Personal data can be accessed and corrected in the online store's user profile. If a purchase is made without a user account, personal data can be accessed through customer support.

Withdrawal of consent If the processing of personal data is based on the customer's consent, the customer has the right to withdraw consent by notifying customer support via email.

Retention Upon closing an online store customer account, personal data is deleted unless such data needs to be retained for accounting purposes or for resolving consumer disputes. If a purchase in the online store is made without a customer account, the purchase history is retained for three years. In the case of disputes related to payments and consumer disputes, personal data is retained until the claim is fulfilled or until the expiration date. Personal data required for accounting purposes is retained for seven years.

Deletion To delete personal data, contact customer support via email. The deletion request is responded to no later than one month from its receipt, and the period for data deletion is specified.

Transfer The request for the transfer of personal data submitted by email is responded to within one month. Customer support verifies the identity of the person and informs about the personal data that are subject to transfer.

Direct marketing messages The email address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, they should select the corresponding reference in the email footer or contact customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object to both the initial and further processing of their personal data, including the profile analysis related to direct marketing, by notifying customer support via email (such information must be presented clearly and separately from any other information).

Dispute resolution Disputes related to the processing of personal data are resolved through customer support (info@omaart.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).