Personal Data Processing

The processor of personal data of the website Chilli.ee, Chilli.lv, Chilli.lt and Chilli App is Chilli Deals OÜ (registry code 11998579) located at Ehitajate tee 114, Tallinn, Harju, Estonia, phone +3726664666 and e-mail info@chilli.ee.

What personal data is processed

• name, telephone number (if the customer wants SMS confirmation) and e-mail address;
• Bank account number;
• cost of goods and services and data related to payments (purchase history);
• customer support information;

For what purpose personal data is processed

Personal data is used to manage customer orders

Purchase history data (date of purchase, service or goods, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences.

The bank account number is used to return payments to the customer.

Personal data, such as e-mail, telephone number, customer name, are processed to resolve issues related to the provision of goods and services (customer support).

The IP address or other network identifiers of the online store user are processed for the online store as an information society service and for the production of online usage statistics.

Legal basis

Processing of personal data takes place for the purpose of fulfilling the contract concluded with the customer.

The processing of personal data is carried out in order to fulfill a legal obligation (eg accounting and settlement of consumer disputes).

Recipients to whom personal data is transmitted

Personal data is transmitted to the online store's customer support for managing purchases and purchase history and resolving customer problems.

If the online store is accounted for by the service provider, the personal data will be transferred to the service provider for accounting purposes.

In case of accommodation booking, the customer's name, telephone, email and country of location will be forwarded to the accommodation, which will be asked by the customer in the shopping cart before concluding the transaction and confirming the booking.

Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality of the online store or data hosting.

Security and data access

Personal data is stored on servers located in the territory of a Member State of the European Union or countries that have joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to US companies that are affiliated to the Privacy Shield framework.

The employees of the Chilli who have access to personal data, can access the personal data only in order to resolve technical issues related to the use of the website and to provide customer support services.

The website implements appropriate physical, organizational and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.

Transfer of personal data to the authorized processors of the online store (e.g. data hosting of the transport service provider) The processing of personal data takes place on the basis of agreements concluded with the online store and the authorized processors. Authorized processors are obliged to ensure appropriate safeguards for the processing of personal data.

Accessing data and correcting

Personal data can be accessed and corrected in the user profile of the website user account. If the purchase has been made without a user account, personal data can be accessed via customer support.

Withdrawal of consent

If the processing of personal data takes place on the basis of the customer's consent, the customer has the right to withdraw the consent by notifying the customer support by email.

Retention

Upon closing the customer account of the website, personal data will be deleted, unless such data is necessary for order fulfillment, storage for accounting purposes or resolution of consumer disputes.

If the purchase in the online store has been made without a customer account, the purchase history will be stored for three years.

In the case of disputes related to payments and consumer disputes, personal data will be kept until the claim is fulfilled or the limitation period expires (three years).

Personal data required for accounting purposes shall be kept for seven years.

Deletion of data

To delete personal data, customers must contact support via email. A request for erasure shall be answered no later than one month and the period for erasure of data shall be specified.

Transfer of data

The data transfer request submitted by email will be answered within one month at the latest. Customer support will identify you and provide you with personal information applicable to the transfer.

Direct marketing messages

The e-mail address and telephone number will be used to send direct marketing messages if the customer has given his consent. If the customer does not wish to receive direct marketing notifications, select the appropriate link in the email footer or contact customer support.

If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of his personal data, including profiling related to direct marketing, by notifying customer support by email.

Dispute resolution

Related to the processing of personal data are resolved through customer support at the e-mail address info@chilli.ee. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).