Databeskyttelsespolitik

PROCESSING PERSONAL DATA

The responsible processor of personal data of the Slept online store is United Beds OÜ (registry code 14855165) located at Tartu mnt. 56, Tallinn 10115, phone 511 4352, and email slept@slept.ee.

What type of personal data are processed:

Name, phone number, and email address;
Delivery address;
Data concerning the price of goods and services and payments (order history);
Customer support data.

Why personal data are processed:

Personal data are used to manage the orders of clients and deliver goods.
Order history data (order date, goods, quantity, data of clients) are used to survey purchased goods and services and analyze client preferences.
The bank account number is used to send refunds to clients.
Personal data, such as email, phone number, and name of client, are processed to solve issues related to goods and providing services (customer support).
The IP address or other network identifiers of the online store user are processed to provide the services of the online store as an information society and draft website traffic stats.

Legal basis

The processing of personal data is done for executing the contract drawn with the client.
The processing of personal data is done for executing legal responsibilities (e.g. accountancy and settling customer disputes).

Receivers of personal data

Personal data are transferred to the customer support of the online store to manage orders and order history and solve problems of clients.
The name, phone number, and email address are transferred to the delivery service provider selected by the client. If the goods need to be delivered by a courier, in addition to contact details, the address of the client is also transferred.
If the accounting services of the online store are offered by a service provider, personal data are transferred for conducting accountancy-related procedures.
Personal data may be transferred to information technology service providers if it is necessary for guaranteeing the functionality or data hosting services of the online store.

Safety and access to data

Personal data are stored in the servers of Zone Media OÜ located on the territory of a European Union member state or a European Economic Area member state.
The employees of the online store have access to personal data, and they can see the personal data to solve technical issues related to using the online store and offer customer support.
The online store implements corresponding physical, organizational, and technical safety measures to protect personal data from incidental or illegal destruction, loss, alteration, or unauthorized access to or disclosure of them.
Transferring personal data to processors authorized by the online store (e.g. delivery service providers and data hosting) is implemented based on contracts drawn between the online store and authorized processors. Authorized processors are obligated to ensure appropriate safety measures when processing personal data.

Access to and changing personal data

Personal data can be accessed and changed under your user profile on the online store. If the purchase has been made without a user account, personal data can be accessed via customer support.

Withdrawal of consent

If a client has agreed to their personal data being processed, the client has the right to withdraw their consent by notifying customer support via email.

Retaining personal data

After closing a user account on the online store, personal data are deleted, except when such data must be retained for accountancy purposes or settling consumer disputes.
If purchases have been made without a user account, order history is retained for three years.
In terms of disputes regarding payments and consumer disputes, personal data are retained until claims are settled or until the expiry date.
Personal data necessary for accountancy are retained for seven years.

Deleting personal data

Customer support must be contacted via email to have personal data deleted. A request to delete personal data is replied to within no longer than one month and the time period to be deleted is specified.

Transferring personal data

A request to transfer personal data sent via email is replied to within no longer than one month. Customer support identifies the person and notifies them of the personal data that are transferred.

Direct marketing notifications

Emails and phone numbers are used for sending direct marketing notifications if the client has agreed to it on Slept’s website. If the client does not want to receive direct marketing notifications, they can select the corresponding link in the email or contact customer support.
If personal data are processed for direct marketing purposes (profiling), the client has the right to object to the initial and further processing of their personal data, including creating their direct marketing profile analysis, by notifying customer support via email.

Settling disputes

Disputes regarding processing personal data are settled via customer support (slept@slept.ee). The supervision authority is the Data Protection Inspectorate (info@aki.ee).