Privacy Policy

PROCESSING OF PERSONAL DATA

The data controller for personal data on greenspark.ee is GreenSpark OÜ, registry code 17185015, address Turu Street 2, 51004 Tartu city, Tartu county, Estonia, info@greenspark.ee.

​

• What personal data is processed
• name, phone number, and email address;
• delivery address;
• bank account number;
• cost of goods and services and payment-related data (purchase history);
• customer support data.

• For what purpose personal data is processed

Personal data is used for managing customer orders and delivering goods.

Purchase history data (purchase date, goods, quantity, customer data) is used to compile an overview of purchased goods and services and to analyze customer preferences.

The bank account number is used to refund payments to the client.

Personal data such as email, phone number, and client name are processed to resolve issues related to the provision of goods and services (customer support).

The IP address or other network identifiers of the online store user are processed for providing the online store as an information society service and for generating web usage statistics.

​

• Legal basis

Personal data is processed for the purpose of fulfilling the contract concluded with the client.

Personal data is processed to fulfill a legal obligation (e.g., accounting and resolving consumer disputes).

​

• Recipients to whom personal data is transferred

Personal data is forwarded to the online store's customer support for managing purchases and purchase history, and for resolving customer issues.

The name, phone number, and email address are forwarded to the shipping service provider chosen by the client. If the goods are delivered by courier, the client's address will also be provided in addition to the contact details.

If the online store's accounting is handled by a service provider, personal data will be transferred to the service provider for accounting purposes.

Personal data may be transferred to information technology service providers if necessary to ensure the functionality or data hosting of the online store.

​

• Accessing and correcting personal data

Personal data can be viewed and corrected in the online store's user profile. If a purchase was made without a user account, personal data can be accessed through customer support.

​

• Withdrawal of consent

If personal data processing is based on the client's consent, the client has the right to withdraw consent by notifying customer support via email.

​

• Retention

Upon closing an online store customer account, personal data will be deleted, except when such data needs to be retained for accounting purposes or for resolving consumer disputes.

If a purchase is made in the online store without a customer account, the purchase history will be retained for three years.

In the event of disputes related to payments and consumer complaints, personal data will be retained until the claim is fulfilled or the limitation period expires.

Personal data required for accounting purposes will be retained for seven years.

​

• Deletion

To delete personal data, please contact customer support via email. Deletion requests will be answered within one month at the latest, and the data deletion period will be specified.

​

• Data Transfer

Requests for the transfer of personal data submitted via email will be answered within one month at the latest. Customer support will verify the identity and inform about the personal data eligible for transfer.

​

• Direct Marketing Messages

Email addresses and phone numbers are used for sending direct marketing messages if the client has given their consent. If the client does not wish to receive direct marketing messages, they should select the corresponding link in the email footer or contact customer support.

If personal data is processed for direct marketing purposes (profiling), the client has the right to object at any time to the initial and further processing of their personal data, including profiling for direct marketing purposes, by notifying customer support via email.

​

• Dispute Resolution

Resolution of disputes related to personal data processing takes place through customer support (info@greenspark.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee). The Consumer Protection Commission and the ODR platform.

‍