The controller of personal data of the online store https://andrus.ee/ is YesTeam OÜ (registry code 17174902, hereinafter the Company), located at Ladva 9, Tartu, Estonia.
Purpose of processing personal data
Personal data is processed for the following purposes:
managing customer orders and delivering goods;
processing payments and issuing refunds;
providing customer support services;
ensuring the security of the online store and preventing fraud;
collecting web usage statistics and improving marketing activities.
Purchase history data (purchase date, product, quantity, customer details) is used for sales reporting and analyzing customer preferences.
Categories of personal data processed
name, phone number and email address
delivery address
bank account number
payment and order-related data (purchase history)
customer support communications
IP address, device and browser technical data
any data voluntarily provided by the customer to the online store
Legal basis
Personal data is processed on the following legal bases:
performance of a contract concluded with the customer;
compliance with legal obligations (e.g. accounting and consumer dispute resolution);
legitimate interest of the Company (e.g. ensuring website security and compiling statistics);
customer consent (e.g. marketing and cookies).
Payment services
Payments are processed via the payment service provider Montonio Finance OÜ.
For payment processing, the customer’s name, order amount and payment-related technical data are transferred to Montonio.
Montonio processes personal data in accordance with its own privacy policy and applicable laws.
Disclosure of personal data
Personal data may be disclosed to:
transport and courier service providers (name, phone number, email address, delivery address);
accounting service providers;
IT and hosting service providers;
payment and fraud prevention service providers.
Data security and hosting
The online store is built on the WordPress platform and hosted on servers operated by Radicenter OÜ.
Personal data is generally stored within the European Union or the European Economic Area.
If data is transferred outside the EU/EEA, appropriate safeguards are applied, including the European Commission’s Standard Contractual Clauses (SCC).
Web analytics and marketing tools
The online store uses the following services:
Google Analytics – to collect website usage statistics (such as page views, device type and general location).
Google Analytics uses cookies and may process IP addresses, which are handled in an anonymized form where applicable.Meta Pixel (Facebook Pixel) – to measure the effectiveness of marketing campaigns and display targeted advertisements on Meta platforms.
Meta Pixel may collect information about user interactions with the online store.
These services are used only with the customer’s consent, provided through the cookie consent mechanism.
Cookies
The online store uses cookies to improve user experience, collect statistics and support marketing activities.
Customers can restrict or disable the use of cookies via their browser settings or through the cookie consent banner.
Accessing and correcting personal data
Customers have the right to access and correct their personal data via their user account.
If a purchase has been made without creating an account, personal data can be accessed through customer support.
Withdrawal of consent
Where personal data is processed based on customer consent, the customer has the right to withdraw consent at any time by contacting customer support via email.
Data retention
upon closure of a customer account, personal data is deleted unless retention is required by law;
purchase data for orders made without an account is retained for three years;
accounting data is retained for seven years;
data related to disputes is retained until the dispute is resolved or the limitation period expires.
Deletion of personal data
To request deletion of personal data, the customer must submit a request via email to customer support.
Requests will be responded to no later than one month after receipt.
Direct marketing
Direct marketing communications are sent only with the customer’s consent.
Consent can be withdrawn at any time using the unsubscribe link in marketing emails or by contacting customer support.
Dispute resolution
Disputes related to the processing of personal data are resolved through customer support at info@andrus.ee.
The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).