Privacy Policy

We are committed to protecting the privacy of our customers and users. Based on this, we have prepared these privacy policy principles, which deal with the collection, use, publication, transmission and storage of customer data. Our activities on the Internet are in accordance with all relevant activities and the relevant legislation of the European Union and the laws of the Republic of Estonia.

Protection of personal data, intellectual property and technical information

The terms of this privacy policy apply to the Palkmajakeskus website (www.palkmajakeskus.ee). Palkmajakeskus collects and processes only those personal data that are necessary to serve the customer in the salon and in the online ordering environment and to operate the loyalty program.

Palkmajakeskus forwards direct marketing, campaign and discount offers to customers only if the customer has given their consent and it can be presented in a reproducible form. The customer has the right to withdraw said consent at any time. With the help of data, we can inform customers about Palkmajakeskus news, campaigns and events. A customer who does not wish to be on our newsletter list can remove himself from it at any time. We also use the collected personal data to deliver the goods and to fulfill our obligations to the customer.

Personal data is data that Palkmajakeskus collects to provide the service, to identify the person, to contact the person to provide the service or to solve questions. Palkmajakeskus does not process sensitive personal data defined in the regulation of the EUROPEAN PARLIAMENT AND COUNCIL REGULATION (EU) 2016/679 (General Data Protection Regulation or GDPR or EU Regulation 2016/679).

Palkmajakeskus, as the controller of personal data, undertakes to protect the personal data of customers and users and their privacy. Palkmajakeskus activities on the internet are in accordance with all relevant activities and the corresponding legislation of the European Union and the laws of the Republic of Estonia, including REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL.

Palkmajakeskus implements all precautions (including administrative, technical and physical measures) to protect collected personal data. Only authorized persons have access to change and process data. The users of the database have undergone the necessary training for using the database.

Security

The principles of the privacy policy of Palkmajakeskus regarding the collection, processing, use, publication, transmission, modification, forgetting and deletion of personal data are described below.

Personal data obtained during orders and purchases made on the Palkmajakeskus website and in the online service environment are treated as confidential information. An encrypted data communication channel with banks ensures the security of the purchaser's personal data and bank details.

The stated principles do not apply to the processing of data of legal entities and other companies/institutions, and do not include the processing of personal data on websites/service environments that are referred to on our websites/service environments (external links). The person representing the company (as a customer of the service) is not a natural person, because it is an authorized representative of a legal entity whose personal data processing is not regulated by REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL. All Palkmajakeskus employees who come into contact with personal data are instructed to comply with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL and to use security measures in their work, which concerns Palkmajakeskus customer service.

Data collection

Palkmajakeskus processes the following personal data: a) Personal code b) Name c) Address d) Telephone number e) e-mail address f) information about purchases made by the customer and contracts concluded with the customer

Regarding natural persons, the collected data is, if necessary, a personal identification number for identifying uniqueness, name, e-mail address, mobile phone, city and country of location for communication. In order to process the data of legal entities, we collect the register number, VAT number, name, country, address, e-mail addresses for contacting and sending invoices, names of contact persons representing the company and their e-mail addresses and contact telephone numbers.

When visiting the Palkmajakeskus website, non-personalized technical data is collected about the visitor. In service environments (online ordering environment), personal data is also collected for the provision of services and identification of persons. Data is collected in Palkmajakeskus in the course of registered purchase/sale transactions and from persons participating in the loyalty program to determine the discount price and to identify the customer (in the sales system). Data is also collected on the number of visitors to the website in order to improve and make the environment more comfortable for visitors. In the ordering environment of the Palkmajakeskus e-store, personal data may be collected regarding subjects of interest to individuals (including the content of the shopping cart, preferences, attitudes, behaviors, etc.) in order to improve the transmission of expected information and thereby improve the customer experience when consuming services and performing direct marketing.

The technical data collected on the website is limited to the Internet address (IP address) of the computer or computer network used, the software version of the computer's web browser and operating system, the time of visit (time, date, year). IP addresses are not associated with personally identifiable information except in service environments where this is an additional security measure.

Storage, transmission and personal rights of collected data

Non-personalized technical data collected on the website will be stored indefinitely. Personal data related to personalized inquiries and/or transactions will be stored for up to 7 years from the last interaction with the service provider due to the obligation to certify transactions in the Accounting Act. Interaction includes responding to direct marketing by viewing or clicking on a link.

Personal data processed by Palkmajakeskus may be transferred without the consent of the person only to an institution or a person who has a direct legal right to do so (for example, a court or pre-trial procedure) and a justified need. In addition, Palkmajakeskus may disclose information about individual users to a third party that provides services to the Palkmajakeskus e-store and is contractually obligated to keep the shared information confidential. The third party is, for example, our partner, whose tasks are the transport of goods sold in the e-shop.

Personal data processed by customers within the framework of Palkmajakeskus purchases is treated as confidential, and the right to process, release or transmit this data belongs solely to the responsibility of the data owner (customer).

A private person has the right to familiarize himself with the data collected about him, to demand the correction of incorrect data, to demand the termination of the processing of his personal data and to exercise other rights arising from the Personal Data Protection Act. Collected personal data can be viewed, changed and supplemented in the "My account" section of our website.

By default, personal data will not be disclosed, except when a corresponding confirmation has been received. All persons have the right to access their personal data in service environments. If a fix is possible, depending on the service environment, it can be done immediately. If the personal data cannot be changed or accessed, submit a request to obtain or correct the data in a way that allows identification of the person. If possible, the data will be issued or corrected within 7 working days. If you wish to opt out of direct marketing offers for all or some topics, you can do so immediately via the link in the footer of every marketing letter sent. The change takes effect immediately. If there is (no longer) a legal basis for processing, disclosing or providing access to personal data, the termination of use or deletion of data, the termination of disclosure of data or the termination of access to data can be requested. For this purpose, an application should be submitted in a way that allows identification of the person. The request will not be granted if: - it may harm the rights and freedoms of another person, - it may prevent the provision of a service or non-provision of a service, - it may hinder the work of law enforcement bodies, - it is not technically necessary and/or possible. – the person of the applicant is not legally bound to the data. - the identity of the applicant cannot be identified.

For example: – You cannot delete an email address if you no longer wish to receive direct marketing offers. In order to meet the requirement, there only needs to be an email address to compare to - so that no letter is sent. – It is not possible to delete all data from the sales program (CRM) unless more contact is recommended. In order to meet the requirement, there must still be enough data to compare with - so that no contact is made.

Privacy Policy Terms and Changes

By using the Palkmajakeskus website, the customer confirms his acceptance of this privacy policy. Palkmajakeskus reserves the right to change the terms of the privacy policy if necessary, notifying all related parties. Palkmajakeskus guarantees that, regardless of any changes, the legal protection of customers' personal data is always guaranteed. By starting to use our website, we assume that you have familiarized yourself with these principles and agree with them.

Please send additional questions about the processing of personal data and other requests or statements related to the processing of personal data to the address info ät Palkmajakeskus punkt com. If the customer finds that his rights have been violated during the processing of personal data, he has the right to appeal to the Data Protection Inspectorate or the court with a request to stop the violation.

Intellectual property

The content of the Palkmajakeskus website (including but not limited to all images and texts) belongs either to Palkmajakeskus or to other organizations and is protected by legislation governing the protection of intellectual property, unless otherwise specified. Distributing or using the content of the Palkmajakeskus website for commercial purposes in whole or in part is prohibited without the prior written consent of Palkmajakeskus. The Palkmajakeskus website also contains references and links to third-party websites, the content of which is not owned by the Palkmajakeskus. Palkmajakeskus is not responsible for the content of such websites or any consequences of their use.