Privacy policy – FC Flora

PROCESSING OF PERSONAL DATA

FC Flora online store www.fcflora.ee personal data pocessor is MTÜ Jalgpalliklubi FCF (register code 80052376) address Jalgpalli street 21, 11312, Tallinn, phone +372 627 9940, email fcflora@fcflora.ee 

Which personal data is being processed

• name, phone number and email address;
• shipping information;
• bank account number;
• the total cost of the goods and payment information (purchase history);
• customer support information. 

What is the purpose of data processing

Personal data is used to manage customer orders and delivering the goods.

Purchase history data (purchase date, goods, quantity, customer information) is used to compile an overview of purchased goods and services and to analyse customer preferences.

The bank account number is used to refund payments to the customer if necessary.

Personal data such as e-mailaddress, phone number and customer name are processed to resolve issues related to the delivery of the order (customer support).

The online store user IP address or other network identifiers are processed for collecting network usage statistics.

Legal basis

The processing of personal data is applied in order to fulfill the contract with the customer.

The processing of personal data is applied in order to fulfill a legal obligation (eg accounting and settlement of costumer disputes).

Recipients to whom personal data are transmitted

Personal data is transmitted to the online store’s customer support to manage orders and purchase history and resolve customer issues.

The name, phone number and email address are forwarded to the delivery service provider. In the case of delivering by the courier, the customer’s address is also forwarded to the service provider.

Personal data may be transferred to network service providers if this is necessary to ensure the functionality or hosting of the online store.  

Security and access to data

Personal data shall be stored on servers located in the territory of a Member State of the European Union or the countries associated with the European Union. Data may be transmitted to countries whose data protection level has been assessed by the European Commission as sufficient, and to US companies that are affiliated to the Privacy Shield framework.

Access to personal data is only for the personel of the online store in order to solve technical issues related to using the online store and provide customer support.

The online store implements necessary physical, organisational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.

The transfer of personal data to authorized processors of the online store (eg delivery service provider and data hosting) takes place on the basis of contracts concluded with the online store and authorized processors. Authorized processors are required to ensure appropriate safety for the processing of personal data.

Introducing and update the personal data

The introducing and update of personal data is enabled at the online store´s customer profile. If the order is purchased without registered customer profile, then you are able to introduce with the data by contacting the customer support.

Withdrawal of consent

The customer has the right to withdraw the consent of the collection of the personal data by informing the customer by e-mail.

Preservation

Personal data will be deleted when you close an online store customer account, unless you need to keep such data for accounting or to resolve consumer disputes.

If the order has been purchased without a registered customer profile, the purchase history will be retained for three years.

In the case of disputes relating to payments and consumer disputes, personal data shall be kept until the claim is fulfilled or until the expiry of the limitation period.

Personal data necessary for accounting purposes shall be kept for seven years.

Deletion

E-posti teel esitatud isikuandmete ülekandmise taotlusele vastatakse hiljemalt kuu aja jooksul. Klienditugi tuvastab isikusamasuse ja teavitab isikuandmetest, mis kuuluvad ülekandmisele. 

Direct marketing

The email address and phone number will be used to send direct marketing messages only if the customer has given their consent. If the customer does not wish to receive direct marketing communications, the appropriate reference in the email footer should be selected or contact customer support contacted.

If personal data is processed for direct marketing purposes (profiling), the customer has the right to object and withdraw the consent at any time to the processing of profile data related to both the initial and further processing of his / her personal data, including direct marketing, by emailing the customer support.

Resolving of the disputes

Disputes related to the processing of personal data are resolved through customer support fcflora@fcflora.ee. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).