Privacy policy and processing of personal data
Chocokoo OÜ is the controller of personal data.
The online store only uses the personal data entered by the purchaser (including name, phone number, address, e-mail and bank details) for processing the order and sending goods to the purchaser. The online store forwards personal data to the transport service provider in order to deliver the goods.
Chocokoo OÜ forwards the personal data necessary to complete the payment to the authorised processor of personal data Maksekeskus AS. Name, phone number, e-mail address, shipping address is forwarded to shipping company (Omniva AS, Itella SmartPost OÜ). Purchase history data (date, products, amounts, customer data) is used for overview of purchased products and services and for analysis of customer preferences. Bank account number is used for making refunds to the customer.
Personal information such as email, phone number, customer name, is processed in order to solve issues related to the provision of goods and services (customer support)
The online store user’s IP address or other network identifiers are processed by the online store as an information society service and for the production of web usage statistics.
Personal information is passed to online store customer support to manage purchases and purchase history, and to solve customer problems.
Personal data is transmitted to the accounting service provider for the online store
accounting operations.
The processing of personal data is carried out for the purpose of fulfilling the contract concluded with the customer and to fulfill a legal obligation (accounting).
Personal data may be transferred to IT service providers if necessary to ensure the functionality or data hosting of the online store.
Access to personal data is available to online store employees who receive personal data in order to solve technical issues related to the use of the online store
and provide customer support service.
The online store implements the appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.
Transfer of personal data to authorised processors of the online store (eg transport service
provider and data hosting) takes place based on the contracts with the online store and authorised processors. Authorised processors are obliged to ensure appropriate safety measures when processing personal data.
The online store sends newsletters and offers to the purchaser’s e-mail address only if the purchaser has expressed their wish to receive them by entering their e-mail address on the website and indicating their desire to receive direct mail.
The purchaser is able to opt out of offers and newsletters sent to their e-mail address at any time by letting us know via e-mail or by following the instructions in an e-mail containing an offer.