Purpose of Processing Personal Data

Personal data is used for managing customer bookings.
Personal data such as email, phone number, and customer name are processed to address issues related to the provision of services (customer support).

Legal Basis

The processing of personal data is carried out to fulfill legal obligations (e.g., service provision and accounting).
Personal data is shared with the accountant responsible for the service provider’s accounting. Personal data may also be transferred to IT service providers when necessary to ensure the functionality or data hosting of the online store.

Security and Data Access

Personal data is stored on veebimajutus.ee servers, which are located in an EU member state or a country within the European Economic Area.
Data may be transferred to countries that the European Commission has deemed to have an adequate level of data protection, as well as to U.S. companies that comply with the Privacy Shield framework.
Access to personal data is granted to company employees who need the information to resolve service-related issues and provide customer support.

Access, Correction, and Withdrawal of Consent

Customers can access their personal data via customer support.
If personal data is processed based on the customer’s consent, they have the right to withdraw their consent by notifying customer support via email.

Data Retention

Personal data is retained for three years.
In the event of disputes related to payments or consumer complaints, personal data will be retained until the claim is fulfilled or the statute of limitations expires.
Personal data necessary for accounting purposes is retained for seven years.

Data Deletion

To request the deletion of personal data, customers must contact customer support via email.
Deletion requests will be responded to within one month, specifying the timeframe for data deletion.

Data Transfer

Requests for data transfer submitted via email will be processed within one month.
Customer support will verify the identity of the requester and inform them of the personal data subject to transfer.

Direct Marketing Communications

Email addresses and phone numbers are used for direct marketing communications only if the customer has given their consent.
If a customer no longer wishes to receive direct marketing messages, they can opt out by selecting the relevant link in the email footer or by contacting customer support.
If personal data is processed for direct marketing purposes (including profiling), the customer has the right to object to both the initial and further processing of their data, including profiling related to direct marketing, by notifying customer support via email at Support@smartitags.com.