Privacy Policy
Personal Data Processing
Protection and Processing of Personal Data
The responsible data processor for the online store www.leyakoreya.ee is the company LEYAKO OÜ, registration code 14417732, phone +372 56569747, and email info@leyakoreya.ee (hereinafter referred to as the Seller).
Personal Data Being Processed:
- First and last name
- Phone number, address, and email address
- Billing and delivery address
- Date of birth (exclusively for providing birthday-related promotions)
- Bank account number
- Cost of goods, payment data (purchase history)
- Other information related to customer surveys and/or customer offers
Purpose of Collecting and Processing Personal Data:
- Personal data is processed to fulfill the purchase agreement with the customer.
- Personal data is processed to fulfill legal obligations such as accounting and resolving consumer disputes.
- Personal data is used to service customer orders and deliver goods.
- Purchase history data (purchase date, product, quantity, customer data) is used to create reviews of purchased products and analyze customer preferences.
- The bank account number is used in case of payment refunds to the customer.
- Personal data such as the customer’s name, email address, and phone number are processed when addressing product issues (customer support).
- The IP address or other online identifiers of the online store user are processed when the online store provides information society services and collects site usage statistics.
Data Transfer to Authorized Processors
The Seller keeps confidential any personal data of the customer obtained during account registration and use of the site and discloses it to third parties only with the customer’s consent, except when the obligation or right to disclose arises from legal acts. The online store user agrees that the Seller has the right to process their data to adapt services to the customer, including transferring them to a party involved in providing the Seller’s services.
List of Authorized Processors:
- LEYAKO OÜ transfers the necessary payment data to the authorized data processor EveryPay AS (reg. 12280690), Montonio Finance OÜ (reg. 14557628).
- LEYAKO OÜ provides personal data to Itella Smart Post/Omniva, which performs delivery, to deliver goods to the buyer.
- LEYAKO OÜ transfers the necessary payment data to banks Swedbank, SEB, Coop, LHV, Luminor.
- LEYAKO OÜ transfers necessary data for statistics to Google Analytics, Facebook.
Access and Correction of Personal Data
Personal data stored in the online store can be viewed and changed in the account management section of the online store. If a purchase was made as a guest (without an account), a data request can be submitted using the data request form.
Withdrawal of Consent
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw their consent in the account management section of the online store.
Storage
When a customer’s account is closed, personal data is deleted, except when needed for accounting or resolving consumer disputes.
If a purchase was made in the online store as a guest (without an account), the personalized purchase history is stored for three years.
In the case of payment and consumer disputes, personal data is stored until the claim is fulfilled or the limitation period expires (three years).
Personal data required for accounting is stored for seven years.
Deletion
Personal data stored in the online store along with the account can be deleted upon request, write to us at info@leyakoreya.ee
To delete other data, a request should be submitted using the data request form. A response to the deletion request is given within one month, specifying the period whose data will be deleted if necessary.
Transfer
Personal data stored in the online store along with the account can be requested from the online store administrator via email info@leyakoreya.ee
To transfer other data, a request should be submitted using the data request form. A response to the data transfer request is given within one month, during which the customer support service verifies the identity and informs about the personal data to be transferred.
Direct Marketing Communications
Email addresses and phone numbers are used for direct marketing communications if the customer has given consent. If the customer does not wish to receive direct marketing communications, they should follow the link in the message or contact customer support.
You can unsubscribe at any time by clicking the link in the footer of our emails.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the processing of their personal data, including profiling, for direct marketing purposes by notifying customer support via email.
Dispute Resolution
Disputes related to the processing of personal data are resolved through customer support at info@leyakoreya.ee
