Cette page n'existe pas encore dans votre langue ; vous lisez la version English.
This policy explains what we do with your personal data. It is written under the General Data Protection Regulation (EU) 2016/679.
Who is responsible
KuldneCommerce OÜ, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia, registry code 17574834, is the controller of your data. For anything to do with privacy, write to [email protected].
What we collect and why
| To handle your order | Name, email address, phone number, delivery and billing address, what
you ordered, the amount and how you paid.
Legal basis: performance of the contract. |
|---|---|
| To run your account | Email address, password (stored only as an irreversible hash), saved
addresses, your order history.
Legal basis: performance of the contract. |
| To keep the shop working | Session and cart identifiers, and the technical data your browser sends.
Legal basis: our legitimate interest in a functioning shop. |
| To meet our bookkeeping duties | Invoices and payment records.
Legal basis: legal obligation. |
| To send you our newsletter | Your email address, only if you asked for it.
Legal basis: your consent, which you can withdraw at any time. |
Who else sees your data
Only parties that need it to do their job for us, and only for that purpose:
- Mollie B.V. (Netherlands) — to take your payment. Your card and bank credentials go straight to Mollie; we never receive them.
- SparrowShipment — to deliver your parcel. They receive your name, address, phone number and email so they can announce delivery.
- Resend — to send the emails about your order.
- Our hosting provider, which keeps the servers this shop runs on.
We do not sell your data, and we do not use it for advertising by third parties.
How long we keep it
- Order and invoice data: seven years, because tax law requires it.
- Your account: as long as you have one. Close it and we erase your personal details; what we must keep from past orders, we keep without your name.
- Newsletter: until you unsubscribe.
- Server logs: at most six months.
Your rights
You may ask us for a copy of your data, to correct it, to erase it, to limit what we do with it, or to receive it in a portable form. You may object to processing based on our legitimate interest. Consent can be withdrawn at any time, without affecting what happened before.
Write to [email protected]. We answer within one month. If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the supervisory authority in your own country.
Cookies
What we store on your device is described in our cookie policy.
Changes
If this policy changes we publish the new version here. Substantial changes that affect you are announced by email.