1. Company details
Torille OÜ, Harju County, Rae Rural Municipality, Lehmja Village, Rye Road 2, 75306
Company registration number: 16546818
2. The authority responsible for the register
Torille OÜ customer service
E-mail: info@torille.net
3. Content of the register
3.1. Personal data is any information which makes it possible to identify, directly or indirectly, a natural person. Examples of ordinary personal data include name, contact details, address, payment information and other data we need to process your orders. Processing of personal data includes, but is not limited to, operations such as collection, storage, use, modification, transfer, erasure and destruction.
3.2. For the purposes of this Privacy Policy, a data subject is a customer or other natural person whose personal data is processed by a data processor.
3.3. For the purposes of this Privacy Policy, a customer is anyone who purchases goods or services from the website of a data processor.
3.4. The data processor complies with the data processing principles set out in the legislation, including processing personal data lawfully, fairly and securely. The data controller is able to confirm that the personal data have been processed in accordance with the law.
3.5. Providing information to us is voluntary, but failure to do so may result in us not being able to provide the service you request in the way you expect. The data controller may process the following information: personal information (name, date of birth, communication language, contact details), billing address, bank account number, payment card details, IP address, and information about products and services purchased, as well as information provided by the customer in connection with arranging the delivery of goods (e.g. when the customer informs a third party, such as a transport company, to collect the product).
4. Legal basis of the register The legal basis for processing personal data is:
- We must have a solid legal basis for processing personal data. This means that whenever we collect and use your data, there must be a justification for doing so that is in line with the European Union’s General Data Protection Regulation (GDPR). The following grounds apply to our e-shop:
- Article 6(1)(b) of General Data Protection Regulation (EU) 2016/679 – performance of a contract or pre-contractual measures;
- Article 6(1)(c) – performance of a legal obligation (e.g. storage of accounting records);
- Article 6(1)(f) – legitimate interest (e.g. customer service);
- Article 6(1)(a) – consent (e.g. direct marketing, newsletter).
5. Data sources, processing of marketing authorisations and deletion of data.
5.1. Personal data may be collected when a customer submits information via the online shop, email, telephone, social media in relation to cookies, contracts, service receipt or other situations or channels in which the customer submits information. You have the right to opt-out of the use of information for marketing purposes at any time. You can ask us to delete your information by emailing info@torille.net. However, we reserve the right to retain information in our systems that we need to comply with legal obligations.
6. Data sharing.
6.1. The Data Processor will not disclose customers’ personal data to third parties without the customer’s explicit instruction or consent, unless this is necessary to fulfil an order or is required by law. For example, this may include a situation where the customer arranges for the goods to be collected by the transport company or a third party and provides the necessary information.
7. Security and storage of personal data
7.1. Security and retention of personal data We implement appropriate organisational and technical security measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Personal data is stored in secure information systems accessible only to authorised persons on the basis of password protection and user-based access. Where data are processed in physical form (e.g. invoices or contracts), they are stored in locked premises accessible only to authorised personnel.
8. Verification of information
You can submit a request for verification of information in writing, signed in person, by sending it to:
Torille OÜ, Rukki tee 2, Rae vald, 75306 Harjumaa, Estonia
9. Changes in data processing
You can submit a request to modify the processing of your data, signed in person and posted to:
Torille OÜ, Rukki tee 2, Rae vald, 75306 Harjumaa, Estonia
10. The right to be forgotten
You can request to have your customer account and information removed from our online store, but we reserve the right to retain the information we need to comply with legal requirements.
We respect the following retention periods when storing personal data:
- We will keep the data collected for the purposes of the contract for as long as it is necessary for the performance of the contract during the contract period or for up to 3 years after the contract expires.
- We keep the original accounting records for 7 years.
- Data collected through enquiries made via websites will be kept for 1 year.
- When cookies are used, the information collected from them is stored for 30 days.
11. Final provisions
11.1. These Data Protection Terms and Conditions have been drafted in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia and other applicable legislation.
11.2. The data controller has the right to amend the data protection conditions, in whole or in part, by informing data subjects of changes via the website https://torille.net.
