1. General provisions
1.4. The data controllear follows the principles of data processing provided by legislation, among other things, the data controller processes personal data legally, fairly and securely. The data controller is able to confirm that the personal data has been processed in accordance with the legislation.
2. Collecting, processing and storage of personal data
2.1. Personal data collected, processed and stored by the data controller is collected electronically, mainly via the website and e-mail.
2.4. The data controller shall not be liable for any damage caused to the data subject or third parties resulting from the submission of false data by the data subject.
2.5. In addition to the personal data collected, general, non-personal data is automatically stored (for example, number of visits, average time spent on the page, etc.). This information is used to evaluate the appeal of the website and to improve its functionality.
2.7. The visitor may delete and / or block cookies stored on their devices by changing their browser settings.
3. Processing of customers’ personal data
3.1. The data controller may process the following personal data:
3.1.1. user’s first and last name;
3.1.2. phone number;
3.1.3. e-mail address;
3.1.4. delivery address.
3.2. In addition to the above, the data controller has the right to collect data about the customer that is available in public registers.
3.3. The legal basis for the processing of personal data is § 6 (1) sections (a), (b), (c) and (f) of the General Data Protection Regulation:
(a) the data subject has consented to the processing of his or her personal data for one or more specific purposes;
(b) the processing of personal data is necessary for the performance of a contract concluded with the participation of the data subject or in order to take pre-contractual measures at the request of the data subject;
(c) the processing of personal data is necessary for the performance of a legal obligation of the data controller;
(f) the processing of personal data is necessary for the legitimate interest of the controller or of a third party, unless such interest outweighs the interests of the data subject or the fundamental rights and freedoms for which personal data must be protected, in particular when the data subject is a child.
3.4. The data controller has the right to share customers’ personal data with third parties, such as authorized data controllers, accountants, transport and courier companies, transmission service companies.
3.5. When processing and storing personal data, the controller shall implement organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure or any other unlawful processing.
3.6. The data controller shall store personal data for as long as is necessary for the fulfillment of the objective or pursuant to the law.
4. Rights of the data subject
4.1. The data subject has the right to access and inspect his/her personal data.
4.2. The data subject has the right to receive information on the processing of his or her personal data.
4.3. The data subject has the right to supplement or correct inaccurate data.
4.4. If the data controller processes personal data on the basis of the data subject’s consent, then the data subject has the right to withdraw his/her consent at any time. If the data subject has signed up to the mailing list of Playcenter OÜ, he or she can delete himself / herself from the mailing list using the separately marked link at the end of the e-mail.
4.5. The data subject can contact the Online Store’s customer support at firstname.lastname@example.org to exercise his/her rights.
4.6. In order to protect his or her rights, the data subject has the opportunity to submit a complaint to the Data Protection Inspectorate.
5. Final provisions
5.1. These data protection conditions have been drawn up in accordance with regulation (EU) No 2016/679 of the European Parliament, the protection of personal data, the processing, free movement and repealing of such data (General Data Protection Regulation) Directive 95/46 / EU law and legislation of the Republic of Estonia and the European Union.
5.2. The data controller has the right to change the data protection conditions in part or in full by notifying the data subjects of the changes through the website www.playcenter.ee or other suitable channels.