PRIVACY POLICY

The data controller for the Synthesit.ee online shop is CoolMiracle OÜ,
registry code: 16056095, tel. +3728840561, e-mail [email protected].

CoolMiracle OÜ (16056095)
Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 7-26, 10145
+3728840561

WHAT PERSONAL DATA ARE PROCESSED
  • name;
  • contact information (telephone number and an e-mail address;
  • payer's address and delivery address;
  • costs of goods and services and data related to payments (purchase history);
  • customer support details;
  • other information related to customer surveys and/or offers.

FOR WHAT PURPOSE PERSONAL DATA ARE PROCESSED
Personal data are processed for the purposes of the performance of the contract concluded with the Сustomer. Personal data are processed for the performance of legal obligations (for example, accounting and the resolution of consumer disputes). Personal data are used for managing the Сustomer's orders and delivering the goods. Purchase history data (purchase date, goods, quantity, Сustomer data) are used for preparing an overview of goods and services purchased and for analysing Сustomer preferences.
The bank account number is used to refund payments to the Сustomer.
Personal data such as e-mail address, telephone number and Сustomer's name are processed in order to resolve any issues related to the provision of goods or services (Customer support).
The IP address or other online identifiers of the user of the online shop are processed for the provision of the online shop as an information society service and for the compilation of Internet use statistics.

TRANSMISSION OF PERSONAL DATA TO AUTHORISED PROCESSORS
Synthesit.ee keeps the customer's personal data confidential that have become known to it in the course of the registration and use of the user account and publishes them to third parties only with the Customer's consent, except where the obligation or entitlement to publish the data results from legislation. The user of the online shop accepts that, in order to provide the Customer with suitable services, Synthesit.ee is entitled to process their data, including the transmission of the Customer's data to parties related to the provision of a service for the Customer by Synthesit.ee. List of authorised processors:
Suppliers - To send orders to the customer:
  • DHL
  • SEREDA
Payment service providers - to pay for orders:
  • Stripe
  • PayPal
Collecting statistics - collecting information for better e-shop user experience:
  • Google Analytics
  • Yandex Metrica

SECURITY AND ACCESS TO DATA
Your personal data will be processed in accordance with the Republic of Estonia Personal Data Protection Act and other applicable legal requirements. When processing your personal information, we implement technical security measures that ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, loss, modification or unauthorised access and any other unlawful processing.
Transmission of personal data to the authorised processors of the online shop – personal data are processed under the contract concluded between the online shop and the authorised processor. The authorised processors are required to ensure appropriate safeguards during the processing of personal data.

INSPECTION AND AMENDMENT OF PERSONAL DATA
Personal data recorded in the online shop may be inspected or amended via the online shop account management. If a purchase has been made in the capacity of a visitor (without a user account), a query about personal data may be submitted using the email [email protected].

RETENTION
When a customer account is closed in the online shop, any personal data are deleted, except where such data need to be retained for accounting or the resolution of consumer disputes.
If a purchase has been made in the online shop in the capacity of a visitor (without a user account), the individual purchase history will be retained for 1 year.
In the event of disputes related to payments or consumer disputes, personal data are retained until the settlement of the claim or until the expiry of the limitation period (three years).
Personal data needed for accounting are retained for seven years.

DELETION
Personal data recorded in the online shop along with the user account may be deleted via email query [email protected].

DIRECT MARKETING MESSAGES
An e-mail address or a telephone number is used for the transmission of direct marketing messages if the Customer has provided the relevant consent. If the Customer does not wish to receive direct marketing messages, the relevant link has to be selected in the e-mail header or Customer support has to be contacted.
If personal data are processed for the purposes of direct marketing (profiling), the Customer is entitled to submit objections in relation to the initial or subsequent processing of their personal data, including the preparation of a profile analysis related to direct marketing, at any time by notifying Customer support via email.

RESOLUTION OF DISPUTES
Disputes related to the processing of personal data are resolved through customer support. The supervisory authority is the Estonian Data Protection Inspectorate ([email protected]).