Please take the time to review our privacy policy regarding the collection, use, disclosure, transfer and storage of customer data. Our online activities comply with all applicable laws and regulations of the European Union and the laws of the Republic of Estonia. If you have any questions or concerns about our privacy policy or data processing, please write to us at info@lehtmann.com
Collection and use of personal data
We are the sole owners of the information collected on the Website. We only have access to the information we collect that you voluntarily provide to us via email or other direct contact. We do not sell or rent this information. We use information about you to respond to the question you have contacted us about. We do not share information about you with third parties outside of our organization unless necessary to fulfill your request. We may contact you by email in the future to inform you of special offers, new products or services, or changes to these Privacy Policy, unless you have indicated that you would prefer that we not do so.
Use and storage of personal data
With the help of the collected personal data, we can inform customers about news, campaigns and upcoming events. A customer who does not want to be on our newsletter list or receive notifications about packages that may interest them can remove themselves from the target group of recipients at any time. We also use the collected personal data for the delivery of goods and to fulfill our obligations to the customer. By agreeing to the terms of the privacy policy, the customer gives us consent to the automated processing of their data. You can always withdraw your consent via our website or by making a written reproducible application. The application or withdrawal of consent has no retroactive effect. To delete personal data, you must contact customer support by e-mail. The deletion request will be responded to no later than within a month and the data deletion period will be specified.
In order to better serve the customer, we may disclose information about individual users to a third party that provides services to the online store and is contractually obligated to keep the shared information confidential. A third party is, for example, our partner, whose tasks are the transport of the services sold. We retain the customer’s personal data until the provision of the service and offers is terminated. Collected data that is required to be retained pursuant to legislation (e.g. accounting data), based on the requirements set out in legislation.
Protection and security of personal data
Our website takes all precautions (including administrative, technical and physical measures) to protect the customer’s personal data. Access to change and process data is only available to authorized persons. The customer has the right to demand the termination of the processing of their data, information about the use of the data and the transfer of data to themselves or a third party in a commonly used format. In order to prevent misuse of customer data and rights, requests are allowed to be submitted only in a form where the person of the applicant is identifiable (digitally signed or personally signed at the representative office). We have the right to respond to such requests within 30 days. All data obtained during the visit to the website is considered confidential information.
Access to personal data
Personal data is stored on Zone OÜ servers located in a Member State of the European Union or a country that is a party to the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed by the European Commission as adequate and to US companies that have joined the Privacy Shield framework. Our employees have access to personal data, who can access it to resolve technical issues related to the use of the website and to provide customer support. Our website implements appropriate physical, organizational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure. Personal data is transferred to authorized processors (e.g. transport service providers and data hosting) on the basis of contracts concluded with authorized processors. Authorized processors are obliged to ensure appropriate safeguards when processing personal data.
Collection of other data
We also collect non-personal data – data that cannot be directly linked to a specific individual (gender, age, language preference, location). We may also collect data about customer activities on our website. This data is aggregated and used to help us provide more useful information to our customers and to help us understand which parts of the website, products and services are of most interest to them. Aggregated data is referred to as non-personal data in this Privacy Policy.
Other terms
By booking from the website, sending an information request and subscribing to the newsletter, you have read and agreed to these principles and terms. We reserve the right to change the general terms of the privacy policy if necessary, but we will do our best to keep our privacy policy up-to-date and available to you on our website. You always have the right to contact the Data Protection Inspectorate or the court to protect your data. The Data Protection Inspectorate is a state institution that you can also contact for consultation or assistance on personal data protection issues.
