1. General Provisions
1.1. This Privacy Policy regulates the principles concerning the collection, processing, and storage of personal data. Personal data is collected, processed, and stored by the data controller Marmes OÜ (registry code 14001598, address Narva mnt. 134-3, Raadi alev 60534 Tartumaa, Estonia).
1.2. A data subject within the meaning of this policy is a customer or any other natural person whose personal data is processed by the data controller.
1.3. A customer is anyone who purchases goods or services from the Online Store.
1.4. The data controller follows the data processing principles established by law, ensuring that personal data is processed lawfully, fairly, and securely.
2. Collection, Processing, and Storage of Personal Data
2.1. The personal data processed is collected electronically, mainly through the website, customer accounts, and e-mail correspondence.
2.2. By sharing their personal data, the data subject grants the data controller the right to collect, organize, and use the data for the purposes defined in this policy.
2.3. The data subject is responsible for the accuracy of the data provided. In case of changes, the data subject must notify the data controller immediately.
3. Types of Data Processed and Purposes
3.1. The data controller processes the following data: first and last name, phone number, e-mail address, delivery address, bank account details, and purchase history.
3.2. Purposes of processing personal data and retention periods:
- Order management and delivery of goods: Data is stored for up to 3 years after the purchase.
- Accounting: In accordance with the law, original accounting documents are stored for 7 years.
- Customer support and marketing: Inquiries are stored for up to 2 years; marketing data until the withdrawal of consent.
4. Transfer of Personal Data and Rights of the Data Subject
4.1. The data controller transfers personal data necessary for the execution of payments to the authorized processor Maksekeskus AS and for delivery to the selected courier company: Omniva, SmartPost, DPD, DHL, UPS, Venipak, FedEx, or Nova Post.
4.2. The data subject has the right to access their data, request rectification, erasure, or restriction of processing by sending a digitally signed request to info@marmesmarket.ee.
4.3. The data subject has the right to lodge a complaint with the Data Protection Inspectorate.
5. Final Provisions
5.1. These data protection terms have been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia, and other relevant legislation of the Republic of Estonia and the European Union.
5.2. The data controller has the right to change these terms partially or fully by notifying subjects via the website https://marmesmarket.ee.