Privacy Policy

Processing of personal data
The data controller of the Gracia Sport online shop is Gracia Sport OÜ (registration number 16816366), e-mail: info.graciasport@gmail.com. Gracia Sport OÜ transmits the personal data necessary for making payments to the authorised processor Montonio.

What personal data is processed

– name, telephone number and e-mail address;
– delivery address;
– bank account number;
– price of goods and services and payment-related data (purchase history);
– customer support data.

For what purpose is personal data processed

Personal data is used to manage customer orders and delivery of goods.

Purchase history data (date of purchase, goods, quantity, customer details) is used to provide an overview of the goods and services purchased and to analyse customer preferences.

The bank account number is used to return payments to the customer.

Personal data such as e-mail, telephone number and customer name are processed to solve problems related to the provision of goods and services (customer support).

The IP address of the shop user or other network identifiers are processed for the provision of the information society service and for the generation of web statistics.

Legal basis

The processing of personal data is carried out for the purpose of fulfilling the contract with the customer.

The processing of personal data is carried out to comply with a legal obligation (e.g. accounting and consumer dispute resolution).

Addressees to whom personal data are transferred

Personal data is passed on to the online shop’s customer support to manage purchases and purchase history and to resolve customer issues.

The name, telephone number and e-mail address are forwarded to the shipping provider chosen by the customer.

If the accounting of the business is carried out by a service provider, personal data is transferred to the service provider for accounting operations.

Personal data may be transferred to IT service providers if this is necessary to ensure the functionality of the business or hosting services.

Security and access to data

Access to personal data is granted to store employees who may work with personal data to solve technical problems related to the use of the store and to provide customer support.

The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access or disclosure.

The transfer of personal data to authorised processors of the business (e.g. transport provider and hosting provider) is based on contracts between the business and the authorised processors.
Authorised processors are obliged to ensure adequate protection of personal data during processing.

Access to and correction of personal data

Personal data can be viewed and edited in the store’s user profile.
If the purchase was made without a user account, personal data can be viewed through customer support.

Withdrawal of consent

If the processing of personal data is carried out on the basis of the customer’s consent, the customer has the right to withdraw this consent at any time by informing customer support by e-mail.

Storage

After cancellation of an online shop user account, personal data will be deleted unless it is necessary to keep it for accounting purposes or for the resolution of consumer disputes.

If the purchase was made in the store without a user account, the purchase history will be kept for three years.

In the case of payment and consumer disputes, personal data will be retained until the claim is settled or the limitation period has expired.

For accounting purposes, personal data will be kept for seven years.

Removing

To have your personal data removed, you must contact customer support by e-mail.
The request for removal of data will be answered within one month at the latest and the date of removal will be specified.

Transmission

A request for the transfer of personal data sent by e-mail will be answered within one month at the latest. Customer support will verify the identity and inform you of the personal data subject to transfer.

Dispute Resolution

Disputes regarding the processing of personal data are resolved through customer support:

E-mail: info.graciasport@gmail.com