Decolights.eu is committed to protecting the privacy of its customers and users. Accordingly, we have established this Privacy Policy which covers the collection, use, disclosure, transfer and storage of customer information. Our activities on the Internet are in compliance with all relevant practices and relevant European Union legislation and the laws of the Republic of Estonia. Please take some time to read our privacy policy.

Collection and use of personal data

Personal data is data that Decolights.eu collects in the course of performing a contract with or contacting an individual.

Payment information

Payments are made outside the e-shop in a secure environment – Kevin.eu UAB for payments by bank transfer in the secure environment of the respective bank and Stripe for payments by credit card in the secure environment. The seller does not have access to the customer’s bank and credit card details.

Personal data of a loyal customer may be collected in the following ways:

By submitting contact information (including your name, personal identification number, postal address, telephone number, email address, preferred method of contact) on our website or elsewhere (e.g., stores).
when you use the website from your customer account information or through cookies.
when you make a purchase or place an order in our store or e-shop by storing personal contact details or information about your purchasing preferences (decolights.eu may ask you to voluntarily provide personal data and personal information in certain areas of the website. Personal information requested may include name, address, postcode, e-mail address, telephone number and other information).
Collection of other data

We also collect non-personally identifiable information – information that cannot be directly linked to a specific individual (gender, age, language preference, location).

We may also collect information about general customer activities in our stores and on our website. This data is aggregated and used to help us provide more useful information to our customers and to learn which parts of our website, products and services are of most interest to them. Aggregate data is treated as non-personally identifiable data in this Privacy Policy.

Use of personal data collected

The personal data collected allows us to inform customers about decolights.eu product news, promotions and upcoming events. A customer who does not wish to be on our newsletter list or to receive notifications about products that may be of interest to him or her can opt out of being targeted at any time. The personal data collected will also be used for the delivery of goods and to fulfil our commitments to the customer.

In order to better serve the customer, decolights.eu may disclose information about individual users to a third party that provides Decolights.eu services and is contractually obligated to keep the shared information confidential. An example of a third party is our partner who is responsible for the transport of goods sold in the e-shop.

Modification of collected personal data

The personal data collected to identify and contact you can be viewed, modified and updated in the “My Information” section of our website.

Protection of personal data

Decolights.eu takes all precautions (including administrative, technical and physical measures) to protect the personal data of the customer. Access to modify and process data is restricted to authorised persons.

Security

All personal data of the customer disclosed in the course of visiting the decolights.eu e-shop and making purchases will be treated as confidential information. An encrypted data communication channel with banks ensures the security of the personal data of the person making the purchase and of bank transactions.

Terms and conditions of the Privacy Policy and changes

By accessing the decolights.eu website or by completing a loyalty application, you have read and accepted these terms and conditions. We reserve the right to change the general terms and conditions of this Privacy Policy, if necessary, by notifying all loyal customers.

Please contact us at [email protected] with any questions or concerns about the Privacy Policy or data processing.

PROCESSING OF PERSONAL DATA

The personal data controller of the webshop Decolights.eu is KS led OÜ (reg. no.:14710780), tel. +372 56050817 and e-mail [email protected]

What personal data is processed

• name, telephone number and e-mail address;
• delivery address;
• bank account number (refund);
• the cost of the goods and services and payment details (purchase history);
• customer support data.

Purposes for which personal data are processed

Personal data is used for the management of customer orders and for the delivery of goods.

Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased and to analyse customer preferences.

The bank account number is used to return payments to the customer.

Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support).

The IP address of the user of the webshop or other network identifiers are processed for the purpose of providing the webshop as an information society service and for the purpose of web usage statistics.

Legal basis

The processing of personal data is carried out for the purposes of the performance of a contract with a customer.

The processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).

Recipients to whom personal data are transferred

The personal data will be transferred to the online shop’s customer support for the management of purchases and purchase history and for the resolution of customer problems.

The name, telephone number and e-mail address will be transmitted to the transport service provider chosen by the customer. In the case of goods to be delivered by courier, the customer’s address will be transmitted in addition to the contact details.

In the case of the accounting of the online shop by the service provider, the personal data will be transmitted to the service provider for the purpose of accounting operations.

Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality or data availability of the online shop.

Security and access to data

Personal data is stored on servers of Zone Media OÜ located in the territory of a Member State of the European Union or a country that is a member of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States that have signed up to the Privacy Shield framework.

Access to personal data is granted to the employees of the online shop who can access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support services.

The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

The transfer of personal data to the online shop’s processors (e.g. transport service providers and data aggregators) is subject to agreements between the online shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.

Access and rectification of personal data

Personal data can be accessed and corrected in the user profile of the online shop. If a purchase has been made without a user account, the personal data can be accessed via the online shop.

Withdrawing consent

Where the processing of personal data is based on the consent of the customer, the customer has the right to withdraw his consent by informing customer support by e-mail.

Retention

Personal data will be deleted upon closure of the online shop customer account, unless such data need to be kept for accounting purposes or for the settlement of consumer disputes.

If a purchase has been made in the online shop without a customer account, the purchase history will be kept for three years.

In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires.

Personal data necessary for accounting purposes will be kept for seven years.

Deletion

In order to delete personal data, please contact customer support by e-mail. A reply to the deletion request will be sent within one month at the latest, specifying the period of deletion.

Transfer to

Requests for transfer of personal data made by e-mail will be answered within one month at the latest. Customer Support will verify the identity and inform about the personal data to be transferred.

Direct marketing communications

The e-mail address and telephone number will be used to send direct marketing communications if the customer has given his consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the footer of the e-mail or contact customer support.

Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his/her personal data, including profiling in relation to direct marketing, by informing customer support by e-mail.

Dispute resolution

Disputes relating to the processing of personal data can be resolved through customer support at [email protected]. The supervisory authority is the Estonian Data Protection Inspectorate ([email protected]).