The personal data manager of the e-shop fresmy.com is Fresmy OÜ, registered at 16771254, Pootsmani tn 27, Tartu, Tartu county, 51017, Estonia, telephone +372 55 36 850 and e-mail hi@fresmy.com (hereinafter referred to as the “Merchant”).
What personal data are processed
- name;
- contact information, such as telephone number and e-mail address;
- payer and delivery address;
- bank account number;
- the cost of goods and services and payment details (purchase history);
- customer support details;
- other information related to customer surveys and/or offers.
We use cookies to make the website function successfully.
Cookies are small passive text files that are downloaded to your computer or other device when you visit a website. A cookie helps the website to remember information about your visit, such as your preferred language and other settings. This allows you to personalise the website according to your preferences.
https://fresmy.com uses cookies to help the website remember the choices you make as a visitor. By visiting the website, you consent to the use of cookies. Cookies help us to provide services according to your preferences and habits. Cookies are typically used to collect statistical data, remember search preferences, deliver targeted advertising, make advertising more relevant and protect your privacy. When you visit https://fresmy.com, in addition to our cookies, cookies may also be stored on your computer and accessed by our analytics and advertising partners.
Purposes for which personal data is processed
The processing of personal data is carried out for the purposes of the performance of the contract with the customer. Processing of personal data for the performance of a legal obligation (e.g. accounting and consumer dispute resolution).
Personal data are used for the management of customer orders and the delivery of goods.
Purchase history data (date of purchase, goods, quantity, customer details) are used to compile an overview of goods and services purchased and to analyse customer preferences.
The bank account number is used to return payments to the customer.
Personal data, such as e-mail address, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support), as well as to prepare and send offers and news.
The IP address or other network identifiers of the user of the e-shop are processed for the purposes of providing the e-shop as an information society service and for web usage statistics.
Transfer of personal data to authorised processors
The Merchant shall keep confidential the personal data of the Customer that it has obtained in the course of registering and using the User Account and shall disclose them to third parties only with the Customer’s consent, unless the obligation or right to disclose the data is required by law. The user of the e-shop agrees that the merchant has the right to process his/her personal data in order to provide the customer with the appropriate services, including the transmission of the customer’s data to persons connected with the provision of the service by the merchant to the customer. List of authorised processors:
Information technology service providers – Personal data is transferred to information technology service providers because it is necessary to ensure the functionality of the e-shop and to ensure data security.
- Zone.ee
Economic and warehouse software – for accounting and warehouse operations
- Merit Aktiva
Suppliers – to deliver orders to the customer:
- Omniva
Payment Intermediaries – to pay for orders
- Swedbank
- SEB
- Danske
- Luminor
- LHV
- Coop
- Citadele
- PayPal
- Stripe
- Montonio
Statistics collection – gathering information to improve the e-shop user experience:
- Google Analytics
- Meta
- Klaviyo.com
Security and access to data
Personal data is stored on Zone.ee servers located in the territory of a Member State of the European Union or a country that is a member of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States that have signed up to the Privacy Shield framework.
The e-shop implements appropriate physical, organisational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
Transfers of personal data to authorised processors of the e-shop – The processing of personal data is carried out on the basis of contracts concluded between the e-shop and processors. The authorised processors are obliged to ensure appropriate safeguards for the processing of personal data.
Accessing and correcting personal data
Personal data stored in the e-shop can be accessed and corrected in the e-shop account management.
Withdrawing consent
Where the processing of personal data is based on the consent of the customer, the customer has the right to withdraw the consent in the e-shop account management.
Retention
Personal data will be deleted when the customer’s e-shop account is closed, unless such data need to be kept for accounting purposes or to resolve consumer disputes.
If a purchase is made as a guest (without a user account) in the e-shop, the personalised purchase history will be kept for five years.
In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires (five years).
Personal data necessary for accounting purposes will be kept for seven years.
Deletion
Personal data stored in the e-shop, including the user account, can be deleted in the e-shop account management.
You can request the deletion of other personal data using the data request form. A request for deletion of data will be answered no later than within one month and, if necessary, the period of deletion will be specified.
Transference
You can download an electronic extract of the personal data stored in the e-shop from the e-shop account management.
For other transfers of personal data, you can submit a request using the data request form. A request for data transfer will be answered within a period of no more than one month, where customer support will verify the identity and inform you of the personal data to be transferred.
Direct marketing communications
The e-mail address and telephone number will be used to send direct marketing communications where the customer has given his consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the header of the e-mail or contact customer support.
Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his or her personal data, including profiling in relation to direct marketing, by informing customer support by e-mail.
Dispute resolution
Dispute resolution in relation to the processing of personal data is provided through Customer Support. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee). Consumer Protection Commission and the ODR platform.