Privacy Policy

PIXMILL ESTONIA OÜ has undertaken the obligation to protect the privacy of customers and users. Based on this, we have prepared these privacy policy principles, which address the collection, use, disclosure, transfer and storage of personal data. Our activities on the internet comply with all relevant activities and the corresponding legislation of the European Union and the laws of the Republic of Estonia. Please take a moment to review our privacy principles.

The e-store is operated by PIXMILL ESTONIA OÜ (reg.no.11814042), Piirimäe 3, Tänassilma, 76406 Harju County, Estonia

COLLECTED AND PROCESSED PERSONAL DATA

1. Customer’s first and last name.
2. Customer’s phone number.
3. Customer’s email address.
4. Delivery address of the goods.
5. Designs, advertisements or other materials sent by the customer.
6. Information contained in emails sent by the customer or in inquiries made.
7. Customer’s bank account number.
8. Cost of goods and services and payment-related data.
9. Communication between the customer and PIXMILL ESTONIA OÜ.
10. Customer’s IP address.

PURPOSES OF PROCESSING PERSONAL DATA

The personal data collected about the Customer mentioned in the privacy terms are processed solely for the purpose of providing the Service, enabling the provision of the Service, preparing contracts and enabling the use of the Website.

• Personal data is used to manage the customer’s orders and deliver goods.
• Purchase history data is used to compile an overview of purchased goods and services, to analyze customer preferences and, among other things, to resolve consumer disputes.
• The bank account number is used for returning payments to the customer.
• Personal data such as email, phone number and customer name are processed to resolve issues related to the provision of goods and services.
• Email is also used for sending invoices and the phone number is used for notifications when goods arrive at the parcel machine.
• The IP address or other network identifiers of the online store user are processed for providing the online store as an information society service and for compiling web usage statistics.

LEGAL BASIS FOR DATA PROCESSING

• Processing of personal data takes place for the purpose of fulfilling the contract concluded with the customer (management of customer orders, delivery, return of goods and payments).
• Processing of personal data takes place to fulfill a legal obligation (e.g. accounting).
• Processing of personal data is necessary due to the legitimate interest of the controller.
• Data processing takes place with the customer’s consent: for direct marketing purposes.

SHARING OF PERSONAL DATA

We do not disclose the Customer’s personal data to third parties, except in the following cases:

• Transfer of personal data to subcontractors or cooperation partners related to the provision of the service if the transfer of data makes the provision of the service possible.
• Due to a legal obligation to disclose or share the Customer’s personal data (primarily for purposes prescribed by law, for example due to a court decision or to prevent crimes, protect the Customer’s life and health).
• To ensure the fulfillment of the provision of the service.
• Due to the sale of the company, either partially or in full, or due to company restructuring. In this case we will take all necessary measures to ensure the continued protection of the Customer’s personal data.
• For the purpose of improving and developing the provided Service. Third parties are considered processors of personal data when processing personal data for the above-mentioned purpose.

STORAGE AND PROTECTION OF PERSONAL DATA

• All personal data collected about the Customer is stored on servers located in countries of the European Union or the European Economic Area.
• Personal data related to the Customer used by PIXMILL ESTONIA OÜ for providing services and fulfilling orders is stored for up to 10 years from the moment the relevant personal data comes into the possession of Pixmill Estonia OÜ or until all claims that may arise from or in connection with these personal data have expired. Accounting source documents are stored for 7 years in accordance with the Accounting Act.
• Personal data of the Customer is accessible only to our employees and members of the management bodies who have the right to use personal data only in connection with providing the Service and managing the Website.
• Due to applicable legislation we may have additional obligations to retain certain personal data.

ACCESS TO AND CORRECTION OF PERSONAL DATA

Personal data can be accessed and corrected in the online store user profile or through customer support. If the purchase has been made without a user account, personal data can be accessed through customer support. If a request to access personal data has been submitted electronically, the information will also be provided through commonly used electronic means.

The Customer has the right to request restriction of the processing of their personal data if the data is inaccurate or incomplete or if their personal data is processed unlawfully.

The Customer has the right to object to the processing of their personal data if they believe that there is no legal basis for processing their personal data.

DELETION

To delete personal data, contact customer support via email. The deletion request will be responded to no later than within one month and the period for deleting the data will be specified. The response will also indicate which personal data will not be deleted and on what legal basis and reason.

DIRECT MARKETING MESSAGES

The email address and phone number are used for sending direct marketing messages if the customer has given the corresponding consent. If the customer does not wish to receive direct marketing messages, they must select the corresponding reference in the footer of the email or contact customer support.

DISPUTE RESOLUTION

Disputes related to the processing of personal data are resolved through customer support at myyk@pixmill.ee or by calling (+372) 5855 9826.

Supervisory authority: Estonian Data Protection Inspectorate