These privacy terms apply to all users of the kamjo.eu online store.
The controller of personal data of the kamjo.eu online store is Kamjo Eesti OÜ, registry code 11699339, address Pärnu mnt 139C/1, Tallinn 11317, Harjumaa.
Phone +372 5664 4123, email info@kamjo.eu.
General principles
Kamjo Eesti OÜ does everything in its power to protect the privacy of its customers.
By using our websites, you agree to our data processing rules and conditions.
We confirm that the processing of your personal data complies with the respective legislation of Estonia and the European Union.
PROCESSING OF PERSONAL DATA
We collect personal data, in particular, if it is necessary to identify and contact customers in connection with the provision of products or services or the performance of a contract, but also to comply with legal obligations.
Types of processed personal data:
– name, phone number, and email address;
– the address of delivery of the goods;
– bank account number;
– cost of goods and services, and payment-related data;
– customer support data.
Purposes for the processing of personal data
Submitted personal data are used for managing the customer’s orders and delivering the goods.
Purchase history data (date of the purchase, goods, quantity, customer details) are used for preparing an overview of the purchased goods and services and for analysing customer preferences.
The bank account number is used for making refunds to the customer.
The contact phone number is necessary for the performance of the contract, including delivering messages in the event of service availability failures.
Contact details such as the customer’s email address and name are processed for resolving any issues related to the provision of the goods and services (customer support).
The IP address and other network identifiers of a user of the online store are processed for providing the online store service as an information society service as well as for producing web usage statistics.
Legal basis
Submitted personal data are processed for the performance of the agreement concluded with the customer.
Submitted personal data are processed for compliance with legal obligations (for example, accounting and settlement of consumer disputes).
Recipients of transmitted personal data
Submitted personal data are transmitted to the customer support team of the online store for managing purchases and purchase histories as well as resolving any customer issues.
The customer’s name, phone number and e-mail address are transmitted to the selected delivery service provider. In the case of delivery of the goods by courier service, in addition to contact details, transmitted data will also include the customer’s address.
If the accounting operations of the online store are performed by a service provider, personal data will also be transmitted to the service provider for performing such accounting operations.
Personal data may be transmitted to information technology service providers if it is necessary for the functionality or data hosting of the online store.
Website visitor identification (cookies)
We use cookie technology on our websites to collect information about the use of the website and to distinguish users in order to provide the most comfortable use of the website. By using our services, you agree to our use of cookies.
A cookie is a small text file that is sent to the user’s browser and stored on the user’s device.
We use the following cookies:
– session cookies that are automatically deleted after each visit;
– Persistent cookies that remain after repeated use;
– third-party cookies used by the websites of the partners to which we link (eg Facebook, Google, banks), we do not control the creation of these cookies, please consult the rules of their use accordingly on the website.
If the user does not wish to accept cookies or wishes to be informed of their placement, the user may change the settings of their browser accordingly, if the user’s browser allows it.
Data protection and access to data
Submitted personal data are stored on servers which are located within the territory of the member states of the European Union or countries that have joined the European Economic Area.
Access to submitted personal data is granted to the employees of the online store for resolving technical issues related to the use of the online store and for providing customer support.
We use organisational, physical and IT security measures necessary to ensure the confidentiality, integrity and accessibility of data. The aim of information security activities is to implement an appropriate level of information protection, risk mitigation and threat prevention.
The communication between the customer and the bank is protected by an SSL security protocol, which ensures that the information exchanged cannot be intercepted or altered by outsiders. The information that moves between us and the bank is provided with digital signatures.
We are committed to the principle that the transmission and collection of personal information should be as secure as possible. However, it must be borne in mind that there are always certain risks, and no technological system is perfectly safe.
Personal data are transmitted to the online store’s data processors (for example, transport and data hosting service providers) under agreements concluded between the online store and the data processors. Data processors are required to ensure that appropriate security measures are taken when processing the personal data.
Accessing personal data
The customer has the right to access their personal data that we use at any time. The customer also has the right to receive information about the purposes of data processing, the types of personal data, the period of storage of personal data and who are the recipients of the personal data to whom they have been disclosed. Acquaintance with the data is possible by submitting a statement to this effect in a form that can be reproduced in writing. Kamjo has the right to respond to such requests within 30 days.
Rectification of personal data
If the customer has discovered incorrect data or if the customer’s personal data has changed, they can always be changed by contacting our team with a corresponding notice.
Withdrawal of consent
In cases where the processing of personal data is carried out on the basis of the consent of the customer, the customer has the right to withdraw their consent by notifying customer support by e-mail.
Retention
Upon closure of a customer account in the online store, any personal data will be deleted, unless the retention of the data is required for accounting purposes or for the resolution of consumer disputes.
Histories of purchases made without a customer account will be retained for 3 years.
In the event of disputes relating to payments or consumer disputes, related personal data will be retained until the settlement of the claim or the end of the validity period.
Personal data which are necessary for accounting will be retained for seven years.
Deletion
If you wish to have your personal data deleted, please contact our team by email. Requests for deletion will be answered no later than within 1 (one) month and will include a specification of the data deletion period.
Transfer
The right to data transfer gives the customer additional control over their personal data. We allow the transfer of data in cases prescribed by law.
Direct marketing messages
The customer’s email address and phone number may be used for sending direct marketing messages, if the customer has given their consent.
In the case of the processing of personal data for direct marketing purposes, the customer has the right to object to the prior as well as the further processing of their personal data, including for profiling related to direct marketing, at any time by notifying our team by email.
Settlement of disputes
The customer always has the right to apply to the Data Protection Inspectorate or the court to protect their privacy rights and data. The Data Protection Inspectorate is a national authority that can be contacted for advice or assistance on personal data protection issues.