Munchy Personal Data Processing Principles.

General

The terms of personal data processing have been developed to protect the privacy of customers. Based on this, the principles regarding the collection, use, publication, transmission and storage of Customer Data are set out below. Munchy's activities are in accordance with the relevant legislation of the European Union and the laws of the Republic of Estonia.

Concepts

  • Customer – a legal or natural person who wants to buy goods or who has made a purchase of goods.
  • Personal data of the customer - any data about an identified or identifiable natural person, regardless of the form or form of such data. Personal data is, for example, customer data such as name, gender, age, social security code, e-mail address, residence data, banking data, income, photos, videos and network identifiers (IP addresses and cookies).
  • Processing of personal data - any operation performed with personal data, including collection, storage, storage, modification, etc.
  • Controller – Sisu Agency OÜ, registry code 14792826, Tartu county, Tartu city, Anne tn 80-82, 50705, Republic of Estonia, e-mail address sisuagencyest@gmail.com and phone number +37253526938. Sisu Agency OÜ transfers the personal data necessary for making payments to the authorized processor Montonio Finance OÜ.
  • Authorized processor - natural or legal person, public sector institution, office or other body that processes personal data on behalf of the personal data processor.

Processing principles

When processing data, Munchy is based on the following principles, ensuring the legality of customer data processing:

  • The processing is legal, fair and transparent to the Client.
  • Personal data is collected precisely and clearly for specified and legitimate purposes and is not subsequently processed in a way that is inconsistent with these purposes.
  • Personal data are relevant, important and limited to what is necessary for the purpose of their processing;
  • Personal data are correct and, if necessary, updated, and all reasonable measures are taken to delete or correct personal data that are incorrect from the point of view of the purpose of the processing without delay;
  • Personal data is stored in a form that allows the Customer to be identified only as long as it is necessary to fulfill the purpose for which the personal data is processed;
  • Personal data is processed in a way that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Purposes of processing

Munchy processes personal data provided voluntarily by the Customer and with confirmed consent. The following are considered personal data:
First and last name
Phone number
Date of birth
Personal code
Delivery address
E-mail address
Method of delivery of goods
The payment method used to pay for the goods
Purchased goods.

Personal data is processed for the following purposes:

  • To enter into a Sales Agreement with the client and perform it;
  • For delivery and delivery of goods. If the Customer chooses a parcel machine or a courier as the method of delivery of the Goods, Munchy has the right to transfer to the parcel machine service and courier service provider the Customer's personal data in the amount necessary to deliver the Goods to the Customer;
  • To issue invoices and send them to the Client;
  • For correspondence with the Client;
  • To serve the customer, including resolving claims. Depending on the service situation, all of the Customer's personal data may be processed to serve the Customer;
  • To send Munchy newsletters and other information sent by Munchy by e-mail. The customer has the right to opt out of them using the hyperlink provided in the newsletter or offer;
  • To create a registered Customer. We also process the following personal data of the Client: purchase history and wish basket;
  • Uploading photos sent by the customer to the website, Facebook or Instagram, in which case Munchy's authorized processor will process the photo material sent by the customer. The customer has the right to request the removal of the relevant photo material by sending an e-mail to info@munchy.com
  • To enable the Customer to use the Munchy e-shop;
  • Munchy uses cookies on its website, the function of which is to collect statistics about website traffic, speed up the use of the website and make it more convenient for users.

Transfer of personal data to authorized processors

Munchy keeps the Customer's personal data, which the Customer has agreed to share during the registration and use of the user account, confidential and discloses them to third parties only with the customer's consent, unless the obligation or right to disclose the data arises from legislation.

The user of the e-store agrees that Munchy has the right to process his data in order to provide appropriate services to the customer, including transferring the customer's data to persons involved in the provision of services by Munchy to the customer.

Security and data access

Personal data is stored on servers located in the territory of a member state of the European Union or countries that have joined the European Economic Area.

The e-shop implements appropriate physical, organizational and IT security measures to protect personal data from accidental or illegal destruction, loss, modification or unauthorized access and disclosure.

Customer rights in the processing of personal data

The private Client has the following rights in relation to the processing of personal data:

  • Submit a request to correct your incorrect personal data if it is insufficient, incorrect or incomplete
  • To partially or fully withdraw your consent to the processing of Personal Data (e.g. consent to receive direct marketing offers).
  • Limit the processing of your Personal Data in accordance with applicable law.
  • To receive his personal data, which he has provided himself and which is processed on the basis of consent or for the performance of a contract, in writing or electronically;
  • Request deletion of your data;
  • The right to object. Munchy will respond to the Customer's request as soon as possible, but no later than one month after receiving the Customer's request. If the Customer submits the request electronically, the information is also provided electronically, if possible, unless the Customer requests otherwise. The customer also has the right to contact the Data Protection Inspectorate or the court at any time if he finds that his rights have been violated.

Data retention and deletion

In the case of purchases made as a regular customer of the e-store, data is stored for at least 5 years.

In case of disputes related to payments and consumer disputes, personal data will be stored until the claim is fulfilled or the statute of limitations expires for up to three years.

Personal data necessary for accounting is stored for 7 years.

Upon closing the customer account of the e-store, personal data is deleted, unless it is necessary to keep such data for accounting purposes or to resolve consumer disputes.

Direct Mail and Marketing

The e-mail address and phone number are used to send direct marketing messages, if the customer has given their consent.

If the customer does not wish to receive direct marketing communications, they must opt out via the hyperlink in the e-mail.

Use of cookies

With the help of cookies, the usage preferences of e-environments are analyzed, which gives an opportunity to make the use more convenient.

Cookies are small data files that are stored on your computer when you visit a website. Cookies help to automatically identify your web browser on the Munchy server.

The customer can block the storage of cookies in his web browser if he wishes, but this may cause problems when using the page.

Validity and changes

The terms of data protection are available to customers on Munchy's website.

Munchy has the right to unilaterally update, specify and supplement the Data Protection Terms at any time in accordance with the applicable law, informing the Customer of the changes via the Munchy website and/or by e-mail.

In the event that the Customer withdraws his consent to the processing of personal data, it is not possible to use the Loyal Customer's account until a new consent is given. In the case of a Loyal Customer, we treat the request to delete data as a request to terminate the Loyal Customer's account.

Solving arguments

Disputes related to the processing of personal data are settled through the Munchy service, and the supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).