The data controller for the Serabella.ee online store (hereinafter the “Online Store”) is Biomeril OÜ, with registration code 12282920, located at Maimu Street 6, Haabersti District, 13522, Tallinn, Harju County, and email address info@serabella.ee (hereinafter “the Merchant”).
What Personal Data is Processed
- Name
- Contact information, such as phone number and email address
- Billing and delivery address
- Bank account number
- Purchase history, including goods and services cost and payment-related information
- Customer support information
- Other information related to customer surveys and/or offers
You can read more about the use and storage of cookies on this page.
Purpose of Processing Personal Data
Personal data is processed for the purpose of fulfilling the contract with the customer. Data processing is also carried out to fulfill legal obligations (e.g., accounting and dispute resolution).
Personal data is used for managing customer orders and delivering goods.
Purchase history data (purchase date, goods, quantity, customer data) is used to create an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used for refunding payments to the customer.
Personal data such as email address, phone number, and customer name are processed to address questions related to the provision of goods and services (customer support) and to create and send offers and news.
The user’s IP address or other network identifiers are processed to provide the Online Store as an information society service and to create website usage statistics.
Disclosure of Personal Data to Authorized Processors
The Merchant keeps customer personal data, obtained through user account registration and use, confidential and only discloses it to third parties with the customer’s consent, unless there is a legal obligation or right to disclose data under applicable law. The customer agrees that the Merchant may process their data, including disclosing it to individuals involved in the provision of services to the customer. The list of authorized processors includes:
- IT service providers: Personal data is disclosed to IT service providers as necessary to ensure the functionality of the Online Store and data hosting.
- Zone.ee
- Accounting and warehouse software: Used for accounting and warehouse operations.
- Merit Software
- Suppliers: For order fulfillment and delivery to the customer.
- Omniva
- Itella
- Payment processors: For processing payments related to orders.
- Swedbank
- SEB
- Danske
- Luminor
- LHV
- Coop
- Citadele
- Montonio
- Statistics collection: Information is collected to improve the customer experience of the Online Store.
- Google Analytics
- Smaily
Security and Access to Data
Personal data is stored on Zone.ee servers located in a European Union member state or a country within the European Economic Area. Data may be transferred to countries where the European Commission has deemed the level of data protection adequate and to U.S. companies that are members of the Privacy Shield framework.
The Online Store implements appropriate physical, organizational, and technical security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.
Personal data is processed based on agreements between the Online Store and authorized processors. Authorized processors are obliged to ensure appropriate security measures when processing personal data.
Accessing and Correcting Personal Data
You can view and make corrections to your personal data saved in the Online Store through your user account. If the purchase was made as a guest (without a user account), you can submit a request about personal data by sending an email to info@serabella.ee.
Withdrawal of Consent
If personal data is processed based on the customer’s consent, the customer has the right to withdraw consent via the user account in the Online Store.
Data Retention
When an online store account is closed, personal data will be deleted, unless such data is required for accounting or resolving consumer disputes.
If a purchase has been made as a guest (without a user account), personalized purchase history is retained for five years.
For payment-related and consumer dispute-related matters, personal data is retained until the claim is fulfilled or the statute of limitations expires (five years).
Accounting-related personal data is retained for seven years.
Deletion
Personal data associated with a user account in the Online Store can be deleted via the user account settings.
For other personal data deletion requests, you can submit an inquiry by emailing info@serabella.ee. We will respond to the data deletion request within one month, and if necessary, we will specify the period during which the data will be deleted.
Transfer
A copy of personal data saved in the Online Store can be downloaded electronically via the user account settings.
For other personal data transfer requests, you can submit an inquiry through the data request form. We will respond to the data transfer request within one month, where customer support will verify your identity and inform you of the personal data subject to the transfer.
Direct Marketing Communications
Email address and phone number may be used for direct marketing communications if the customer has given their consent. If the customer does not wish to receive direct marketing communications, they can opt-out by using the link in the email footer or by contacting customer support.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object to the processing of their personal data, including profiling related to direct marketing, at any time by notifying customer support via email.
Dispute Resolution
Disputes related to personal data processing will be resolved through customer support. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee). The Consumer Disputes Committee and the ODR platform.
.