Data protection conditions
Online store scalpest.ee The controller of personal data is 3Krip OÜ (registration code 16254228), located at Tormi 9/1-3, Kiili, 75401,
email info@scalpestonia.ee.
1. What personal data is processed?
− name, telephone number and e-mail address;
− delivery address of the goods;
− bank account number;
− cost of goods and services and payment-related data (purchase history);
− customer support data.
− IP address
2. For what purpose is personal data processed?
2.1. Personal data is used to manage customer orders and deliver goods.
2.2. Purchase history data (purchase date, product, quantity, customer data) is used to track purchased goods and
for compiling an overview of services, analyzing customer preferences and, among other things, resolving consumer disputes
for the purpose of resolution.
2.3. The bank account number is used to refund payments to the customer.
2.4. Personal data such as e-mail, telephone number, customer name are processed in order to resolve the issue of goods and
questions related to the provision of services (customer support). E-mail is also used to send invoices
and the phone number is used to notify the parcel terminal that the goods have arrived.
2.5. The IP address or other network identifiers of the online store user are processed by the online store as
for the provision of information society services and for the production of web usage statistics.
2.6. The technical solution for making bank link payments is provided by Montonio Finance UAB, which is bridged by Montonio Finance OÜ.
3. Legal basis
3.1. Personal data is processed for the purpose of fulfilling the contract concluded with the client (processing the client's orders).
administration, delivery, return of goods and payments).
3.2. Personal data is processed to fulfill a legal obligation (e.g. accounting).
3.3. Data processing takes place with the client's consent to perform the following activities: sending newsletters
4. Recipients to whom personal data is transferred
4.1. Personal data is transmitted to the online store's customer support for the purpose of managing purchases and purchase history and
to solve customer problems.
4.2. Name, telephone number and e-mail address will be forwarded to the transport service selected by the customer.
to the provider. If the goods are delivered by courier, then the
contact details also include the customer's address.
4.3. If the online store's accounting is carried out by a service provider, personal data will be transmitted
to a service provider for accounting operations.
4.4. Personal data may be transferred to information technology service providers if this is necessary for the operation of the online store.
to ensure functionality or data hosting.
5. Security and data access
5.1. Personal data is stored on servers located in a Member State of the European Union or in a European Union country.
in the territory of the countries that are members of the European Economic Area. Data may be transferred to countries that
The level of data protection has been assessed as adequate by the European Commission.
5.2. Access to personal data is available to online store employees who can view personal data in order to:
resolve technical issues related to the use of the online store and provide customer support services.
5.3. The online store implements appropriate physical, organizational and IT security measures to
protect personal data from accidental or unlawful destruction, loss, alteration or unauthorized access
for access and disclosure.
5.4. Transfer of personal data to recipients who are authorized processors of the online store (e.g. transport service providers)
provider and data hosting) is carried out on the basis of agreements concluded with the online store and authorized processors.
Processors are required to ensure appropriate safeguards when processing personal data.
6. Access and correction of personal data
You can access and make corrections to your personal data in the online store user profile or by contacting customer support.
If the purchase has been made without a user account, you can access your personal data through customer support.
If the request for access to personal data is submitted electronically, the information shall also be provided
through publicly available electronic means.
7. Withdrawal of consent
If the processing of personal data is based on the client's consent, the client has the right to withdraw consent.
under customer account settings or by notifying customer support via email.
8. Storage
8.1. When closing an online store customer account, personal data will be deleted, except for personal data (purchase history).
data) that needs to be retained for accounting purposes or to resolve consumer disputes.
8.2. In the event of disputes related to payments and consumer disputes, personal data will be retained until the claim is settled.
until fulfillment or the end of the limitation period.
8.3. Personal data contained in primary accounting documents will be retained for seven years.
9. Restriction
The client has the right to request restriction of the processing of their personal data if the data is incorrect or
are incomplete or if their personal data is processed unlawfully.
10. Objections
The customer has the right to object to the processing of his/her personal data if he/she has grounds for doing so.
believe that there is no lawful basis for the processing of their personal data.
11. Deletion
To delete personal data, you must contact customer support by email. To request deletion
The response will be made no later than within a month and the period for data deletion will be specified.
12. Transfer
A request for the transfer of personal data submitted by email will be responded to within one month at the latest.
Customer support will verify your identity and inform you about the personal data that is subject to transfer.
13. Direct marketing communications
13.1. The email address and telephone number will be used to send direct marketing messages if the customer is
has given the appropriate consent. If the customer does not wish to receive direct marketing messages, they must select e-mail
See the corresponding reference in the footer or contact customer support.
13.2. If personal data is processed for direct marketing purposes (profiling), the customer has the right to
both the initial and further processing of personal data, including those related to direct marketing
object to the profiling at any time by informing customer support via email
on the way.
14. Tattoo Second Hand
Our website features a Second Hand Marketplace where registered users can post ads for used tattooing, permanent makeup, scalp micropigmentation and related equipment and contact sellers.
14.1. What personal data do we collect?
When you register an account, submit an ad, contact a seller, or otherwise use the classifieds environment, we may process:
-
your name and display username;
-
email address;
-
your phone number, if you have provided one;
-
account and login details;
-
a general location, such as a city, region, or country;
-
ad details, descriptions, prices and delivery preferences;
-
photos and other content added to the ad;
-
messages and inquiries sent through the contact forms of the classifieds environment;
-
IP address, browser information, timestamps and security log data; and
-
information contained in notifications, complaints or communications sent to us.
Do not include unnecessary personal information, exact home address, identification documents, bank card details, or other sensitive information in public ads, descriptions, or photos.
14.2. How do we use data from the classifieds environment?
We process this data to:
-
create and manage user accounts;
-
publish, display and manage advertisements;
-
enable communication between buyers and sellers;
-
to check and moderate advertisements;
-
respond to inquiries, notifications and complaints;
-
prevent fraud, spam, misuse and security incidents;
-
enforce the Second Hand Marketplace Terms of Use;
-
to comply with legal obligations and legitimate requests from authorities; and
-
to prepare, present or defend legal claims.
The legal basis for processing personal data may be the performance of a contract, our legitimate interest in managing and protecting the classifieds environment, compliance with a legal obligation, or, where applicable, your consent.
14.3. Information visible to other users
Information submitted for publication may be publicly visible. This may include:
-
your chosen display username;
-
the general location of the item;
-
ad description and photos;
-
the condition, price and delivery information of the item; and
-
other information that you have added to the ad yourself.
Your email address, phone number, or exact home address are not displayed publicly unless you include them in publicly visible content or choose a setting that makes them visible.
Buyers can contact sellers through the contact options provided in the listings environment. Contact information and messages sent through these may be shared with the intended recipient of the message.
14.4. Service providers and data recipients
We may use web hosting, security, email, analytics, backup and ad environment software providers. These service providers may process personal data on our behalf only to the extent necessary to provide those services and in accordance with applicable data protection requirements.
We may also disclose information if required by law or lawful order of a competent authority, as well as if reasonably necessary to investigate possible fraud, illegal activity or security threats.
Scalp Estonia does not sell the personal data of users of the classifieds environment.
14.5. Data retention
Account and classifieds environment data is retained as long as the account is active or as long as it is necessary to provide the classifieds environment service.
Ads may be retained until deleted, expired, or removed. Certain account, ad, moderation, communication, and security data may be retained for a reasonable period of time after deletion, if necessary:
-
to resolve disputes or complaints;
-
to prevent fraud and repeated misuse;
-
to fulfill legal obligations;
-
for security and backup purposes; or
-
for the establishment, exercise or defense of legal claims.
When personal data is no longer needed, it will be deleted or anonymized in accordance with our retention practices and applicable law.
14.6. User responsibilities
The user must respect the privacy of other users of the classifieds environment. Personal data obtained through the environment may only be used for actual communication and transactions related to a specific advertisement.
They may not be used for unsolicited marketing, mailing list addition, harassment, profiling, data collection, or any other purpose unrelated to the advertisement.
14.7. Your rights
Under applicable data protection law, you may have the right to:
-
to familiarize yourself with the personal data processed about you;
-
request the correction of inaccurate data;
-
request the deletion of your personal data;
-
restrict or object to certain processing;
-
require the transfer of appropriate data;
-
withdraw consent where processing is based on consent; and
-
file a complaint with the Estonian Data Protection Inspectorate or another competent supervisory authority.
To exercise your rights or ask a privacy-related question, please contact us using the contact details provided in the privacy policy.
Deleting your account does not automatically remove information that we need to retain for legal, security, fraud prevention, or dispute resolution purposes.
15. Dispute Resolution
Disputes related to the processing of personal data are resolved through customer support.
(info@scalpestonia.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).