Privacy Policy

Chocokoo OÜ is the controller of personal data.

The online store only uses the personal data entered by the purchaser (including name, phone number, address, e-mail, and bank details) for processing the order and sending goods to the purchaser.

The online store forwards personal data to the transport service provider to deliver the goods. Chocokoo OÜ forwards the personal data necessary to complete the payment to the authorised processor of personal data: Montonio Finance UAB, registry code 305205122, address Konstitucijos 7, Vilnius, Lithuania. Name, phone number, e-mail address, and shipping address are forwarded to the shipping company (Omniva AS, Itella SmartPost OÜ). Purchase history data (date, products, amounts, customer data) is used for an overview of purchased products and services and for an analysis of customer preferences. The bank account number is used for making refunds to the customer.

Personal information such as email, phone number, and customer name is processed in order to solve issues related to the provision of goods and services (customer support). The online store user’s IP address or other network identifiers are processed by the online store as an information society service and for the production of web usage statistics. Personal information is passed to online store customer support to manage purchases and purchase history and to solve customer problems.

Personal data is transmitted to the accounting service provider for the online store accounting operations. The processing of personal data is carried out for the purpose of fulfilling the contract concluded with the customer and to fulfil a legal obligation (accounting). Personal data may be transferred to IT service providers if necessary to ensure the functionality or data hosting of the online store. Access to personal data is available to online store employees who receive personal data to solve technical issues related to the use of the online store and provide customer support service.

The online store implements the appropriate physical, organisational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access and disclosure. Transfer of personal data to authorised processors of the online store (e.g., transport service provider and data hosting) takes place based on the contracts with the online store and authorised processors. Authorised processors are obliged to ensure appropriate safety measures when processing personal data.

The online store sends newsletters and offers to the purchaser’s e-mail address only if the purchaser has expressed their wish to receive them by entering their e-mail address on the website and indicating their desire to receive direct mail.

The purchaser can opt out of offers and newsletters sent to their e-mail address at any time by letting us know via e-mail or by following the instructions in an e-mail containing an offer.