Privacy policy
The data controller for the personal data of the Rūķupaka online shop is Päkapikupakk OÜ (registry code ), located at Tammelehe tee 49, Alliku küla, 76403 Saue vald, hello@rukupaka.lv, tel. +372 5912 6129. In addition, Päkapikupakk OÜ forwards the data necessary for processing payments to EveryPay AS.
What personal data is processed
– name, telephone number and email address;
– delivery address of the goods;
– bank account number;
– the cost of goods and services and payment-related data (purchase history);
– customer support data.
For what purpose personal data is processed
Personal data is used to manage the customer's orders and to deliver the goods.
Purchase history data (date of purchase, goods, quantity, customer data) is used to compile an overview of the goods and services purchased and to analyse customer preferences.
The bank account number is used to make refunds to the customer.
Personal data such as email, telephone number and the customer's name is processed in order to resolve questions related to the provision of goods and services (customer support).
The IP address or other network identifiers of the online shop user are processed in order to provide the online shop as an information society service and to compile web usage statistics.
Legal basis
Personal data is processed for the purpose of performing the contract concluded with the customer.
Personal data is processed in order to comply with a legal obligation (e.g. accounting and the resolution of consumer disputes).
Recipients to whom personal data is transferred
Personal data is transferred to the online shop's customer support in order to manage purchases and purchase history and to resolve customer issues.
The name, telephone number and email address are transferred to the transport service provider chosen by the customer. If the goods are delivered by courier, the customer's address is transferred in addition to the contact details.
If the online shop's accounting is carried out by a service provider, personal data is transferred to the service provider for the purpose of performing accounting operations.
Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality of the online shop or data hosting.
Security and access to data
Personal data is stored on the servers of Elkdata OÜ, which are located in the territory of a Member State of the European Union or of countries that have joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission, and to US companies that have joined the Privacy Shield framework.
Access to personal data is held by employees of the online shop, who can view personal data in order to resolve technical issues related to the use of the online shop and to provide customer support.
The online shop applies appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access and disclosure.
Personal data is transferred to the online shop's processors (e.g. the transport service provider and data hosting) on the basis of contracts concluded between the online shop and the processors. Processors are obliged to ensure appropriate safeguards when processing personal data.
Accessing and correcting personal data
Personal data can be viewed and corrected in the user profile of the online shop. If a purchase was made without a user account, personal data can be accessed via customer support.
Withdrawal of consent
If personal data is processed on the basis of the customer's consent, the customer has the right to withdraw consent by notifying customer support by email.
Retention
When an online shop customer account is closed, the personal data is deleted, unless such data needs to be retained for accounting purposes or for resolving consumer disputes.
If a purchase was made in the online shop without a customer account, the purchase history is retained for three years.
In the event of disputes related to payments and consumer disputes, personal data is retained until the claim is settled or the limitation period expires.
Personal data required for accounting is retained for seven years.
Deletion
To have personal data deleted, please contact customer support by email. A deletion request will be answered within one month at the latest, and the period for deleting the data will be specified.
Data portability
A request for the transfer of personal data submitted by email will be answered within one month at the latest. Customer support will verify your identity and inform you of the personal data that is subject to transfer.
Direct marketing messages
The email address is used for sending direct marketing messages if the customer has given the corresponding consent. If the customer does not wish to receive direct marketing messages, they should use the corresponding link in the footer of the email or contact customer support.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support by email at hello@rukupaka.lv .
Dispute resolution
Disputes related to the processing of personal data are resolved through customer support hello@rukupaka.lv or by telephone on +372 5912 6129. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).