All customer personal data obtained during visits to Incredit OÜ and purchases are considered confidential information.
Incredit OÜ does not disclose any data obtained to third parties. If desired, the customer has the right to request the deletion of their data from Incredit OÜ’s database.

PERSONAL DATA PROCESSING

  • The data controller of Incredit OÜ’s online store is:
  • Haik Sargsyan
  • Registry code: 38909112751
  • Tel: +372 55 18 777 and email: info@incredit.ee
  • Personal Data Processed
  • Name, surname, phone number, and email address;
  • Delivery address;
  • Bank account number;
  • Cost of goods and services and payment-related data (purchase history);
  • Customer support data.

Purpose of Processing Personal Data

Personal data is used to manage customer orders and deliver goods.

Purchase history data (purchase date, product, quantity, customer data) is used to generate an overview of purchased goods and services and analyze customer preferences.

Bank account numbers are used for refunding payments to customers.

Personal data such as email, phone number, and customer name are processed to resolve issues related to the provision of goods and services (customer support).

The IP address or other network identifiers of the online store user are processed to provide an information society service and generate website usage statistics.

Legal Basis

The processing of personal data is carried out for the performance of the contract concluded with the customer.The processing of personal data is carried out to fulfill a legal obligation (e.g., accounting and resolving consumer disputes).

Recipients to Whom Personal Data is Transferred

Personal data is transferred to the online store’s customer support to manage orders and purchase history and resolve customer issues.

Name, phone number, and email address are transferred to the transportation service provider selected by the customer:

  • Omniva OÜ
  • DPD OÜ

For goods delivered by a courier, in addition to contact information, the customer’s address is also transferred.

Personal data may be transferred to IT service providers if necessary for the functionality or data hosting of the online store.

Security and Access to Data

Personal data is stored on Incredit OÜ’s servers located at: www.zone.ee and may be transferred to countries that the European Commission has assessed as having an adequate level of data protection, as well as to U.S. companies that are members of the Privacy Shield framework.

Personal data is accessible to online store employees who can view the data to resolve technical issues related to the use of the online store and provide customer support.

The online store implements appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.

The transfer of personal data to authorized processors (e.g., transport service providers and data hosting) is done based on agreements between the online store and the authorized processors.

Authorized processors are required to ensure appropriate protection measures when processing personal data.

Accessing and Correcting Personal Data

Personal data can be viewed and corrected in the user profile of the online store.

If the purchase was made without a user account, personal data can be accessed through customer support at: info@incredit.ee.

Withdrawal of Consent

If personal data processing is based on the customer’s consent, the customer has the right to withdraw their consent by notifying customer support via email.

Retention

When the online store customer account is closed, personal data will be deleted unless such data needs to be retained for accounting purposes or resolving consumer disputes.

If the purchase was made without a customer account, the purchase history will be retained for three years.

In cases of disputes related to payments or consumer disputes, personal data will be retained until the claim is fulfilled or the limitation period expires.

Personal data required for accounting purposes will be retained for seven years.

Deletion

To delete personal data, the customer must contact customer support via email at: info@incredit.ee.

A response to the deletion request will be provided within one month, and the data deletion period will be specified.

Transfer

Requests for the transfer of personal data by email will be responded to within one month.

Customer support will verify identity and inform the customer of the data to be transferred.

Direct Marketing Communications

Email addresses and phone numbers may be used to send direct marketing communications if the customer has given their consent.

If the customer does not wish to receive direct marketing communications, they must indicate this during registration or contact customer support at: info@incredit.ee.

Dispute Resolution

Disputes related to the processing of personal data will be resolved through customer support at: info@incredit.ee, tel: +372 55 18 777.

The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).