Privacy policy

Tearoma OÜ processes customer data in order to:

• fulfil the contract concluded with the customer on the basis of:
• the necessity to perform the contract or to take steps at the customer's request prior to entering into a contract;
• the necessity to comply with legal obligations;
• the legitimate interest of Tearoma OÜ.

provide additional services, conduct customer satisfaction surveys, perform market research and collect statistics on the basis of:

• the customer's consent;
• the legitimate interest of Tearoma OÜ in improving Tearoma OÜ's services and products;
• the necessity to improve the customer's user experience and develop new products and services.

protect its violated or disputed rights (for example, providing data to a court) on the basis of:

• the customer's consent;
• the necessity to perform the contract or to take steps at the customer's request prior to entering into a contract;
• the necessity to comply with legal obligations;
• the legitimate interest of Tearoma OÜ in preventing, limiting and investigating the misuse and unlawful use of Tearoma OÜ's services and products.

fulfil its obligations arising from legal requirements (for example, providing data to investigative authorities) on the basis of:

• the necessity to perform the contract or to take steps at the customer's request prior to entering into a contract;
• the necessity to comply with legal obligations;
• the legitimate interest of Tearoma OÜ in reliable risk management and general business management.

When does Tearoma OÜ disclose customer data?

Customer data is kept confidential and is not disclosed to third parties without the customer's consent (except in cases provided for by law).

Tearoma OÜ has concluded confidentiality agreements with companies providing postal and delivery services regarding the use of the data provided to them.

Who is a third party?

A third party is a natural or legal person who is neither the customer nor a person processing customer data.

How does Tearoma OÜ use customer data when offering various services?

Tearoma OÜ sends the customer offers from Tearoma OÜ. Tearoma OÜ may also provide the customer with offers from carefully selected partners. A partner does not receive access to the customer's data unless the customer has specifically expressed an interest in the partner, its products or services.

How does Tearoma OÜ use profiling to create personalised offers?

Profiling is the automated processing of customer data used to evaluate known personal characteristics of the customer. For example, to analyse or predict a person's financial situation, personal preferences, interests or place of residence. Profiling is used for marketing purposes and is based on the legitimate interest of Tearoma OÜ, the necessity to perform the contract or the customer's consent.

Tearoma OÜ may process customer data to improve the experience of using digital services, for example, to adapt the presentation of services to the devices used and to create personalised offers (except where the customer has opted out of direct marketing).

Based on its legitimate interest, Tearoma OÜ ensures the provision of personalised offers based on profiling and a convenient use of the online store environment by individual customers.

What rights does the customer have?

The customer has the following rights in relation to the processing of customer data:

• to request the correction of their customer data if it is insufficient, incomplete or incorrect;
• to object to the processing of their customer data if the use of customer data is based on a legitimate interest, including where it is carried out for profiling-based direct marketing purposes (for example, receiving marketing offers or participating in surveys);
• to request the deletion of their customer data, for example, if the data is processed on the basis of the customer's consent and the customer has withdrawn their consent. This right does not apply if the customer data that the customer requests to be deleted is also processed on other legal grounds, for example, for the performance of a contract;
• to restrict the processing of their customer data on the basis of applicable rights, for example, while Tearoma OÜ is assessing whether the customer has the right to have their data deleted;
• to obtain information as to whether Tearoma OÜ processes their customer data and, if so, to obtain access to such data;
• to receive the customer data provided by them, which is processed on the basis of consent or for the performance of a contract, in writing or in a commonly used electronic format and, where technically possible, to transmit such data to other service providers (data portability);
• to withdraw their consent to the processing of customer data;
• to lodge a complaint regarding the use of customer data with the Data Protection Inspectorate (website: www.aki.ee) if the customer believes that the processing of customer data violates their rights and interests under applicable law.

How can customer data be changed and how can a request be made to stop processing the data?

The customer has the right to access their personal data (by sending a request by email to info@tearoma.ee). If the customer's data has changed or has become inaccurate for any other reason, the customer must notify us immediately (by email at info@tearoma.ee).

The customer has the right to request the termination of the processing of their personal data and/or the deletion of the collected data if such a right arises from the Personal Data Protection Act or other applicable legislation.

How long is customer data retained?

Customer data is not processed for longer than necessary. The retention period for such data may be based on the contract concluded with the customer, the legitimate interest of Tearoma OÜ or applicable law (for example, legislation relating to accounting or limitation periods, or other private law provisions).