Privacy policy

Estonian Coffee Roastery OÜ is committed to protecting the privacy of its customers and users. Accordingly, we have prepared this Privacy Policy which covers the collection, use, disclosure, transfer and storage of customer information. Our activities on the Internet are in compliance with all relevant practices and relevant European Union legislation and the laws of the Republic of Estonia. Please take some time to read our privacy policy.

Estonian Coffee Roastery OÜ is the controller of personal data, Estonian Coffee Roastery OÜ forwards the personal data necessary for the execution of payments to the processor Maksekeskus AS.

Collection and use of personal data
Personal data is data relating to you, as an individual, directly or indirectly collected and processed by Estonian Coffee Roastery OÜ for the purposes of performing a contract with or associating with an individual and complying with legal obligations.
Personal data of a loyal customer may be collected in the following ways:
- when submitting contact information (including your name, personal identification number, postal address, telephone number, e-mail address, preferred method of contact) on our website
- when making a purchase or placing an order in our e-shop when storing personal contact information or information about your purchasing preferences (Estonian Coffee Roastery OÜ may ask you to voluntarily submit personal data and personal information in certain areas of the website.). Personal information requested may include name, address, postal code, e-mail address, telephone number and other information);

Other data collection
We also collect non-personal data - data that cannot be directly linked to a specific individual (gender, age, language preference, location).
We may also collect information about customer activities on our website. This data is aggregated and used to help us provide more useful information to our customers and to help us understand which parts of our website, products and services are of most interest to them. Aggregate data is treated as non-personally identifiable data for the purposes of this Privacy Policy.

Use and storage of personal data collected
The personal data we collect helps us to inform customers about Estonian Coffee Roastery OÜ product news, promotions and upcoming events. A customer who does not wish to be on our newsletter list or to receive notifications about products that may be of interest to them can remove themselves from the target audience at any time.
We also use the personal data collected to deliver the goods and to fulfil our obligations to the customer.
By agreeing to the terms of the Privacy Policy, the customer gives Estonian Coffee Roastery OÜ consent to the automated processing of his/her data. You can always withdraw your consent via our website or by submitting a statement in a form that can be reproduced in writing. No statement or withdrawal of consent has retroactive effect.
In order to better serve the customer, Estonian Coffee Roastery OÜ may disclose information about individual users to a third party that provides services to Estonian Coffee Roastery OÜ and is contractually obligated to keep the shared information confidential. An example of a third party is our partner who is responsible for transporting the goods sold in the e-shop.

Protection of personal data
Estonian Coffee Roastery OÜ takes all precautions (including administrative, technical and physical measures) to protect customer's personal data. Access to modify and process data is restricted to authorised persons.
If you suspect that your personal data has been handled in a way that is not described in this Privacy Policy or if there is a risk that your data has been leaked to unauthorised persons, please let us know immediately. This is the only way we can keep potential damage to a minimum.
The customer has the right to request the cessation of the processing of his/her data, information on the use of the data and the transfer of the data to himself/herself or to a third party in a commonly used format. In order to avoid misuse of the customer's data and rights, requests may only be made in a form in which the identity of the applicant can be identified (digitally signed or personally signed by a representative). We are entitled to respond to such requests within 30 days.

Security
All personal data of the customer disclosed in the course of visiting the Estonian Coffee Roastery OÜ e-shop and making purchases will be treated as confidential information. The encrypted data communication channel with the banks ensures the security of the personal data of the purchaser and the security of bank transactions.

Privacy Policy terms and conditions and changes
By accessing our website or completing a loyalty application, you have read and agreed to these terms and conditions. We reserve the right to change the general terms and conditions of this Privacy Policy if necessary by notifying all loyal customers, but we will do our best to keep our Privacy Policy up to date and available to you on our website.
Estonian Coffee Roastery OÜ is the controller of the customer's personal data. For any questions or concerns about the Privacy Policy or data processing, please contact e-pood@eestiparimkohv.ee.
You always have the right to turn to the Data Protection Inspectorate or the courts to protect your data. The Data Protection Inspectorate is a national authority which can also be contacted for advice or assistance on data protection issues.