The controller of personal data of the e-shop Mylove is A&A Cleaning OÜ (registered office 16306043, Peterburi tee 46, Lasnamäe district, 11415 Tallinn, Harju county, Estonia; phone +372 5555 444 9; e-mail info@mylove.ee ) (hereinafter referred to as the "Merchant").

What personal data is processed

- personal and contact information (including name, personal identification number, telephone number, address, e-mail address, etc.).
- delivery address
- bank account number
- the cost of goods and services and payment details (purchase history and instalment claim details).
- customer support details
- other information related to customer surveys and/or offers.

Purposes for which personal data is processed

Personal data is used for the performance of customer contracts, the management of orders, the delivery of goods and the fulfilment of legal obligations.
Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased and to analyse customer preferences. The bank account number is used to return payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support).
The e-shop user's IP address or other network identifiers are processed for the purpose of providing the e-shop as an information society service and for the purpose of web usage statistics.

Use of personal data

Personal data is used for the management of purchases and purchase history and for the settlement of claims made on behalf of the customer.
In the interests of providing you with the best service, Mylove may disclose information about individuals to third parties who provide services to Mylove. Transfers of personal data to Mylove's processors (e.g. transport service provider, hire-purchase provider, product maintenance service provider, data warehouse) are carried out on the basis of contracts between Mylove and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.
Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality or data availability of the e-shop.

Transfers of personal data to processors

The Merchant shall keep confidential the personal data of the Customer that have become known to it in the course of registration and use of the User Account and shall disclose them to third parties only with the Customer's consent, unless the obligation or right to disclose the data arises from legislation. The user of the e-shop agrees that the trader has the right to process his/her personal data in order to provide the customer with the appropriate services, including the transmission of the customer's data to persons connected with the provision of the service by the trader to the customer. List of data processors:
Suppliers - to deliver orders to the customer:
- DPD
- Itella
- Omniva
- Venipak
Payment intermediaries - to pay for orders:
- Swedbank
- SEB
- luminor
- LHV
- Coop bank
Collection of statistics - collecting information to improve the user experience of the e-shop:
- Google Analytics
- META
- Smaily

Legal basis

The processing of personal data is carried out for the purpose of the performance of a contract with a customer.
Processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).
With the customer's consent, we may collect information about customer activities in our online and retail stores. According to the data, the customer will receive personalised and best offers for products and services upon request.

Security and data access

Personal data is stored on servers located in the territory of a Member State of the European Union or in the territory of countries that have acceded to the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States that have signed up to the Privacy Shield framework.
Access to personal data is granted to Mylove employees who can access personal data in order to resolve customer queries or technical issues related to the use of the e-shop.
Mylove implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

Modification of personal data

You can change your personal data in the Mylove e-shop under your user profile or by sending an application to info@Mylove.

Withdrawal of consent

If the processing of personal data is based on the consent of the customer, the customer has the right to withdraw the consent by sending a request by e-mail to info@Mylove. The request will be answered within 30 days at the latest.

Storage at

When you close your Mylove account, your personal data will be deleted, except where such data needs to be stored for accounting purposes or to resolve consumer disputes.
If a purchase is made in an online shop without a customer account, the purchase history is kept for three years.
In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires (three years).
Personal data necessary for accounting purposes are kept for seven years.

Deletion

To request the deletion of your personal data, please send an application by e-mail to info@Mylove. A reply will be sent within 30 days at the latest.

Transfer to

To transfer personal data, send an application by e-mail to info@Mylove. A reply will be sent within 30 days.

Direct marketing communications

The email address and telephone number will be used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing communications, a reference must be selected at the foot of the e-mail.
Where personal data is processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his or her personal data, including profiling for direct marketing purposes. To do so, send an application by e-mail to info@Mylove. A reply will be sent within 30 days at the latest.

Dispute resolution

Disputes relating to the processing of personal data can be resolved through customer support (info@Mylove).
The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).