Information on processing personal data at Orkla Eesti AS

The responsible processor of personal data in the online store is Orkla Eesti AS (Reg. No. 11267031), address Põrguvälja tee 6, Lehmja, Rae Parish, Harjumaa 75306, Estonia,

tel +372 6877 710 and email

The following personal data are processed in order to provide the service:

  • name, surname, phone number and email address;
  • delivery address;
  • bank account number;
  • cost of goods and services.

Purpose for processing personal data

  • Personal data are used to manage customer orders and deliver goods.
  • Bank account numbers are used to refund payments to the customer.
  • Personal data such as email, phone number and customer name are processed to resolve issues related to the delivery of goods and services.
  • The IP address or other network identifiers of the user of the online store are processed for the provision of the online store service as one of the services in information society and for web usage statistics.

Legal basis
Personal data are processed for the purpose of executing the contract concluded with the customer.

Processing personal data takes place in order to fulfil a legal obligation (e.g. accounting, or settlement of consumer disputes).

Recipients to whom personal data are transmitted
Personal data are transmitted to the customer support service of the online store to manage purchases and purchase history and to resolve customer issues.

Name, phone number, email address and delivery address will be provided to the transport service provider.

Personal data may be transmitted to information technology service providers if needed to ensure the functionality of the online store or data hosting.

Security and access to data
Personal data are stored on servers located in the territory of a member state of the European Union or countries that are members of the European Economic Area. Data may be transmitted to countries that have been assessed by the European Commission as having an adequate level of data protection, and to US companies that are affiliated with the Privacy Shield framework.

Access to personal data is granted to the staff of the online store, so that they could resolve technical issues related to the use of the online store and to provide customer support.

The online store implements appropriate physical, organisational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

The transmission of personal data to processors authorised by the online store (e.g. transport service provider and data hosting) is subject to agreements with the online store and the authorised processors. Authorised processors are required to provide appropriate safeguards during the processing of personal data.

Access and rectification of personal data
Personal data can be accessed through customer support.

Withdrawal of consent
If personal data are processed based on the customer’s consent, the customer has the right to withdraw the consent by notifying customer support via email.

Retaining personal data
The online store retains purchase history for up to 12 months.

In the case of disputes relating to payments and consumer disputes, personal data shall be retained until the claim has been complied with or until the limitation period has expired.

Personal data necessary for accounting purposes shall be retained for seven years.

Read more about the use of personal data by Orkla Eesti AS.