Privacy policy
What personal data is processed
- name, telephone number and e-mail address;
- bank account number;
- the cost of the services and information on payments (purchase history);
Purposes for which personal data is processed
Personal data is used to manage customer orders.
Purchase history data (date of purchase, service, quantity, customer details) is used to compile an overview of purchased services and to analyse customer preferences.
The bank account number is used to return payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of services (customer support).
The IP address or other network identifiers of the user apart of the online booking environment are processed for the purpose of mitigating fraud and for the purpose of online usage statistics.
Legal basis
The processing of personal data is carried out for the purpose of the performance of a contract with a customer.
Processing of personal data to comply with a legal obligation (e.g. accounting and resolving consumer disputes).
Recipients to whom personal data are disclosed
Personal data will be provided to the online shop's customer support for purchases and purchase history, and for handling customer problems.
Security and data access
Access to personal data is granted to the employees of Shanti Ruum OÜ, who can access personal data in order to resolve technical issues related to the use of the booking environment and to provide customer support services.
Shanti Ruum OÜ implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Accessing and correcting personal data
If the purchase has been made without a user account, the personal data can be accessed via a login.
Withdrawal of consent
If the processing of personal data is carried out on the basis of the customer's consent, the customer has the right to withdraw the consent by informing Customer Support by e-mail to info@shantiruum.ee.
Storage of data
If a purchase is made in the booking environment without a customer account, the purchase history is kept for three years.
In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires.
Personal data necessary for accounting purposes are kept for seven years.
Deletion
To request the deletion of personal data, please contact by e-mail to info@shantiruum.ee.
A reply to the erasure request will be given within one month at the latest, specifying the period of erasure.
Transfering data
Requests for the transfer of personal data made by e-mail will be answered within one month at the latest. Customer Support will verify the identity and notify the personal data to be transferred.
Dispute resolution
Disputes relating to the processing of personal data will be resolved through customer support. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).