Lottemaa Pood (Tuulesosin OÜ) has assumed the obligation to protect privacy of their customers and users. Therefore, we have prepared these Privacy Policy principles, which govern the collection, use, disclosure, transmission and storage of customer data. Our operations on the Internet comply with all relevant practices, as well as respective EU legislation and laws of the Republic of Estonia. Please take a moment and review the principles we apply to privacy.

Collection and use of personal data

Personal data means any data that can be directly or indirectly associated with you as an individual, which are collected and processed by Tuulesosin OÜ in order to fulfil contracts concluded with natural persons, to contact them, and perform obligations pursuant to law.

Personal data of loyal customers can be collected in any of the following ways:

• when you provide us your contact information (incl. your name, postal address, telephone number, e-mail address, the preferred method of communication) or on our website;

• when you use our website, data are collected through your account or through cookies;

• when you make a purchase or place an order in our e-shop and store your personal contact information or purchasing preferences.

Collection of other data

We also collect non-personal data, i.e. data that cannot be directly linked to a particular individual (gender, age, language preference, location).

We may also collect data of general nature about how our customers interact with our e-shops and the website. These data are combined and used to provide customers information that is more useful for them, and to learn about which parts of the website, products, and services attract the most interest. In this Privacy Policy such combined data are regarded as non-personalised data.

Use and storage of collected personal data

We can use any personal data we have collected to display for customers product news, campaigns and upcoming events. Customers who wish to opt out from our newsletter mailing list, or do not wish to get information about products that might interest them, may unsubscribe from the mailing lists at any time.

We also use personal data that we collect to delivery goods, and to fulfil obligations that we may have assumed towards the customer.

By agreeing with the terms and conditions of the Privacy Policy the customer gives Tuulesosin OÜ their consent for automated processing of their data. You may revoke your consent at any time on our website, or by sending us a request in a format reproducible in writing. Such requests and consents do not have retroactive effect.

To ensure better customer service, Tuulesosin OÜ may disclose information about individual users to a third party who provides services to us and is contractually bound to keeping any shared information confidential. Such third party may be, for instance, our partner whose duty is to deliver goods sold in our e-shop.

Tuulesosin OÜ stores all personal data of a client until the loyal customer contract terminates. Data that we must store pursuant to law (e.g. accounting data) are stored by Tuulesosin OÜ in accordance with the provisions of law.

Alterations to personal data

Customers can see, alter, and supplement their personal data, collected for the purpose of identification and communication with them, on our website in the “My Account” section.

Security of personal data

Tuulesosin OÜ takes all precautions (incl. administrative, technical, and physical measures) to protect customers’ personal data. Only authorised persons have access to personal data for making alterations and processing the same.

If you suspect that your personal data are treated contrary to what is described in this Privacy Policy, or if there is any risk that your data have leaked to unauthorised parties, please notify us immediately. This is the only way that allows us to minimise any potential damages.

Customers have the right to demand termination of the processing of their data, ask about how their data are used, request that their data be transmitted in a commonly used format either to themselves or to a third party. In order to avoid misuse of customer data and rights, such requests may only be submitted in a format that makes it possible to identify the person submitting that request (signed digitally or personally at the company’s office). We have the right to respond to such requests within 30 days.

We regard a request to terminate processing of data as a request to terminate the loyal customer contract.

Security

Any personal data that you provide while visiting and shopping in Lottemaa e-shop are considered confidential information.

The use of encrypted data transmission channel with banks guarantees that personal data and bank particulars of buyers are protected.

Terms and conditions of, and amendments to Privacy Policy

By starting to use our website or completing the loyal customer application you confirm that you have read these principles, terms and conditions, and agree with them. We reserve the right to amend the general terms and conditions of this Privacy Policy, if necessary, by notifying all loyal customers thereof, but we make our best effort to ensure that our Privacy Policy is kept updated and available for you on our website.

The controller in charge of processing customers’ personal data is Tuulesosin OÜ. If you have any questions or concerns about the privacy policy or data processing, you are kindly asked to contact us at kaubandus@lottemaa.ee

You may always contact the Data Protection Inspectorate or a court to protect your personal data. The Data Protection Inspectorate is a national authority that may also be contacted for advice or assistance in matters concerning protection of personal data.