OÜ Tooltrade Baltic

Data Protection

 

Tooltrade Baltic OÜ (hereinafter referred to as Tooltrade Baltic) is a company established in 2013 selling woodworking devices and cutting devices.

We collect, retain and use personal data for the provision of best product solutions, service and fulfil our contracts. Tooltrade Baltic processes personal data carefully and according to law, respecting the natural person’s right for the protection of personal data.

These data protection policy rules extend to all offers, contracts (including sales contracts), oral agreements (in the form of offer and accept) between Tooltrade Baltic and natural persons. Data protection policy is an integral part of offers and contracts.

 

1. Data processor and controller

 

The processor and controller of personal data is:   Tooltrade Baltic OÜ

     Registry code: 12582970

     Address: Turu tn 63, 50106 Tartu city, Estonia

     E-mail: info@puidumasin.ee

                                                                                                     Telephone: +372 716 8088

                                                                                                     VAT ID: EE101717975

 

2. Data subjects, personal data categories and origin

Tooltrade Baltic is processing personal data of clients, partners (natural persons or employees of legal persons) and employees. We receive personal data directly from clients when he/she contacts us with the intent to purchase products or order services. We receive personal data directly from partner when he/she contacts us with the intent to sell us products or provide services.

 

We are processing following personal data:

1. personal data and contact details, e.g. first name, surname, personal identification code, residential address, e-mail address, telephone numbers;
2. data of legal person’s representatives, e.g. first name, surname, personal identification code, position, connection with the legal person, residential address, e-mail address, telephone numbers;
3. payment and finance data, e.g. payment method, account number, bank and card data, data of financial behaviour;
4. data concerning purchase of products and using services, e.g. method of delivery, reclamations;
5. data of communication, e.g. data inserted in our web contact form, data changed via e-mails, messages, social media platforms;
6. IP-address, maintaining security of information system and securing compliance with the requirements of the terms of use;
7. data about creation of use account and user activity (log in time, number of entries, user preferences about user profile);
8. data from technical support;
9. online identifier, e.g. cookies data.

Please note that upon deficiency of data listed in p-s 1-5, 7, we may not be able to conclude or fulfil contracts.

We use personal data from following third persons:

• national registers, commercial register, population register or other public source or register. We collect and use this data to confirm data accuracy.
• business partners if we have your consent or it is provided by law.

 

3. Purpose and legal grounds of processing personal data

We are processing personal data to:

• identify data subject;
• conclude, alter or fulfil our sales or service contracts;
• conclude, alter or fulfil our contracts with partners;
• precontractual negotiations;
• proceed inquiries and applications by clients or partners, including via web;
• solve claims or guarantee demands by clients or partners or to solver consumer disputes;
• exercise rights and obligations arising from legislation;
• fulfil accounting and audit obligations;
• in the legitimate interests of Tooltrade Baltic to avoid violation of law or damage.

We are processing personal data in accordance with EU regulations and Estonian legislation.

 

4. Principles of processing personal data

We are following principles upon processing personal data:

1) legality and fairness – personal data is processed legally and fairly;
2) purposefulness – personal data is collected for specified, explicit and legitimate purposes and it shall not be processed in any manner which is incompatible with these purposes;
3) quality – personal data must be adequate and appropriate and must not be excessive given the purposes of the data processing;
4) accuracy – personal data must be accurate and, if necessary, kept up to date; reasonable measures are taken to ensure that any personal data which is inaccurate with respect to the purpose of data processing shall be erased or rectified without delay;
5) retention – personal data is retained in the format which enables to identify the data subject only until this is necessary for achievement of the purpose for which the personal data is processed;
6) security – personal data is processed in a manner that ensures appropriate security thereof, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of implementing appropriate technical or organisational measures. We apply physical, technical and organisational measures to protect personal data and manage risks. We follow risk and keep them reasonably under control.

 

5. Rights of data subjects

Natural person has following rights according to General Data Protection Regulation:

• Right for information –right to know which personal data is retained and how it is processed.
• Right for rectification of the personal data of the data subject – right to demand for rectification of insufficient and false personal data.
• Right to withdraw consent for processing personal data – if processing of personal data is done with consent, this consent can be withdrawn.
• Right to erasure (‘right to be forgotten’) – right to demand that we delete personal data. We have the right to decline – if processing of personal data is necessary for compliance with legal obligations, for exercising the right of freedom of expression and information, for the establishment, exercise or defence of legal claims or for reasons of public interest.
• Right to restriction of processing – data subject has the right in certain cases to restrict or limit processing of personal data (e.g if the data subject has objected to processing)
• Right to object – the data subject has the right to object to processing of personal Fata concerning him or her, which we shall respond within reasonable time.
• Right to data portability – if processing of personal data is based on consent and is automatic, the data subject has the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format.
• Automated individual decision-making, including profiling – if we have notified person of making decisions based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, the person may demand not to be subject to a decision based solely on automated processing,
• Complaint procedure. Person has the right to file a complaint to the Estonian Data Protection Inspectorate (address Tatari 39, Tallinn, e-mail info@aki.ee, telephone + 372 627 4135). Additional information on website www.aki.ee/en

We ask you to send questions concerning processing of personal data to our e-mail info@puidumasin.ee.

 

6. Confidentiality of personal data

We keep your personal data confidential. Personal data is not disclosed to third persons, unless data subject has explicitly asked for it or given consent, it is enabled by law or obligations towards Tooltrade Baltic are not fulfilled.

We have the right to use personal data for protecting our rights and forward data for the protection of our rights to third persons (court etc).

If we ask another company to process personal data under subcontract, we shall use service provider guaranteeing us compliance with General Data Protection Regulation (including security measures). Personal data is processed in European Economic Area (EU countries, Norway, Iceland and Lichtenstein). If transmission of personal data outside European Economic Area is required, it is done according to General Data Protection Regulation.

 

7. Retention of personal data

Retention period is as long as it is obligatory or permitted by law or necessary for the interests of our business.

If website client account is closed, personal data is deleted, unless this data needs to be retained for accounting or consumer disputes.

The retention period of personal data processed for legal obligations is as long as such obligation is valid (e.g. obligation to preserve accounting source documents for seven years according to Accounting Act). The retention period of personal data concerning fulfilment of contract or dispute is the limitation period of claim or lasts until the end of dispute.  

If the term for retention of personal data expires, we erase personal data permanently.

 

8. Security measures

Tooltrade Baltic has implemented processing rules, organizational, technical (including IT) and physical security measures to protect personal data from against accidental destruction, loss or damage or unauthorised or unlawful processing (access and public disclosure). Security measures apply to all information systems, processes of human activity, including employees, suppliers, clients and service providers.

Website administrator has access to personal data in order to solve technical questions about using website, to manage orders and provide client support service.

Transmission of personal data to website administrator authorised employees is made according to contract concluded between website administrator and authorised data processor. Authorised processor is obliged to guarantee relevant security measures upon processing personal data.

Tooltrade Baltic retains personal data for minimum period necessary and erases it upon the end of retention period. Tooltrade Baltic follows EU regulations and Estonian legislation of personal data protection.

 

9. Profile analysis and automated decision making

Tooltrade Baltic does not perform automated processing, including automated processing of personal data with the aim of evaluating, analyzing and estimating personal aspects of natural persons, including aspects connected to natural person’s work results, economic situation, health, personal preferences, interests, credibility, actions or location. Tooltrade Baltic does not perform automated processing, including with the aim to evaluate personal data to make decisions limiting rights and liberties of a natural person.

E-mail address is used for direct marketing only if client has given consent accordingly.

If personal data is used for direct marketing, client has the right to present objections any time about processing personal data, including profile analysis connected to direct marketing (please provide clear information separate from other information), via e-mail info@puidumasin.ee.

 

10. Cookies

Tooltrade Baltic uses cookies on website. Cookies are small text files that your web browser places on your computer or smart device when visiting our website and enables to remember your user preferences. Cookies are designed to ensure personalized user experience and convenient navigation on website.

Accepting cookies is consenting to the rules of this policy.

If you prefer not to receive cookies, you may set your browser to refuse all cookies. For that activate private browsing or cookies blocking function in your browser. Different browsers provide different measures on how to manage cookies. Please note that if you opt out of the cookies, we cannot be sure that our website will function.

We use cookies only to capture and analyse the statistical data for improving our site and applications. We use the Google Analytics Website Analysis Service to capture statistical data on number of website visitors, the pages visited, the total length of time spent on our website, used devices and other statistics.

 

11. Data Protection Policy and Changes

Data protection rules are available on Tooltrade Baltic website.

By buying our merchandise or using our services, you, as a user of our website or as our client, agree to the provisions of this policy and confirm that you have read and understood all of the provisions stated in the policy.

Data Protection Policy is renewed according to the relevant changes in data processing.

Feel free to contact us with regards to any questions with respect to the processing of your personal data or cookie policy at: info@puidumasin.ee.