Privacy policy

1. General provisions

1.1. This privacy policy sets out the principles for collecting, processing and storing personal data. Personal data is collected, processed and stored by the controller Evolvum OÜ.

1.2. A data subject within the meaning of this privacy policy is a customer or any other natural person whose personal data is processed by the controller.

1.3. A customer within the meaning of this privacy policy is anyone who purchases goods or services from the controller's website.

1.4. The controller follows the data processing principles set out in legislation; among other things, the controller processes personal data lawfully, fairly and securely. The controller is able to confirm that personal data has been processed in accordance with the law.

 

2. Collection of personal data

2.1. Personal data is data that Evolvum OÜ collects to identify or contact an individual. Personal data may be collected with the customer's consent in the following ways:

- when contact details (including your name, postal address, phone number, e-mail address, personal identification code) are submitted in the Ledex online store

- from customer account information or through cookies when using the website

- when making a purchase or placing an order in our online store (the store may ask you to voluntarily provide personal data and information in certain areas of the website).

2.2. By sharing their personal data, the customer grants the controller the right to collect, organise, use and manage, for the purposes defined in this privacy policy, the personal data that the customer shares directly or indirectly when purchasing goods or services on the website.

2.3. The data subject is responsible for ensuring that the data they provide is accurate, correct and complete. Knowingly providing false data is considered a breach of this privacy policy. The data subject must notify the controller of any changes to the data provided without delay.

2.4. The controller is not liable for any damage caused to the data subject or third parties as a result of the data subject providing false data.

2.5. The personal data required may include:

  • name, e-mail address, phone number, residential address
  • delivery address, postal code
  • bank account number
  • cost of goods and services and payment-related data (purchase history)
  • customer support data

2.6. In addition to the above, the controller has the right to collect data about the customer that is available in public registers.

2.7. The legal basis for processing personal data is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation:

a) the data subject has given consent to the processing of their personal data for one or more specific purposes;

b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

c) processing is necessary for compliance with a legal obligation to which the controller is subject;

f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

2.8. Personal data is used to manage customer orders and deliver goods. The bank account number is used to make refunds to the customer. Purchase history data (date of purchase, goods, quantity, customer details) is processed to compile an overview of purchased goods and services and to analyse customer preferences. The IP address or other network identifiers of the store's users are processed to provide the online store as an information society service and to compile website usage statistics.

The personal data collected allows us to inform customers about Evolvum OÜ news, campaigns and upcoming events. A customer who does not wish to be on our newsletter list can unsubscribe at any time.

 

3. Processing and storage of personal data

3.1. Personal data is shared with the online store's customer support to manage purchases and purchase history and to resolve customer issues.

  • Name, phone number and e-mail address are shared with the delivery service provider chosen by the customer.
  • For goods delivered by courier, the customer's address is also shared in addition to the contact details.
  • If the online store's accounting is handled by a service provider, personal data is shared with that service provider to carry out accounting operations.
  • Personal data may be shared with IT service providers where necessary to ensure the functionality or data hosting of the online store.
  • The merchant is the controller of personal data and shares the personal data necessary for making payments with the processor Maksekeskus AS.

3.2. When processing and storing customers' personal data, the controller applies organisational and technical measures that protect personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.

An encrypted data channel with the banks (Maksekeskus or similar) ensures the security of the buyer's personal data and bank details.

3.3. When a customer account in the online store is closed, the personal data is deleted, unless such data must be retained for accounting purposes or to resolve consumer disputes. If a purchase was made without a customer account, the purchase history is retained for three years. In the event of disputes related to payments or consumer disputes, personal data is retained until the claim has been fulfilled or until the end of the limitation period. Personal data required for accounting is retained for seven years.

 

4. Customer rights

4.1. The customer has the right to access and review their personal data. If the purchase was made without a user account, personal data can be reviewed through customer support.

4.2. The customer has the right to receive information about the processing of their personal data.

4.3. The customer has the right to supplement or correct inaccurate data.

4.4. If the controller processes the customer's personal data on the basis of consent, the customer has the right to withdraw that consent at any time.

4.5. To exercise their rights, the customer can contact the online store's customer support at info@ledex.ee.

4.6. To protect their rights, the customer may file a complaint with the Estonian Data Protection Inspectorate.

 

5. Final provisions

5.1. We reserve the right to amend this privacy policy where necessary. By using the Ledex online store website, we assume that you have read and agree to these terms. Any changes will be announced on the website. For any questions or concerns about this privacy policy and data processing, please contact info@ledex.ee

5.2. This privacy policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia, and the legislation of the Republic of Estonia and the European Union.