This privacy policy explains what personal data the imsan.ee online store collects, what it is used for, and what rights the data subject has.
Data controller
IMSAN OÜ
Registrikood / рег. код / Reg. no: 11521340
KMKR / НДС / VAT: EE101245560
Kilgi vkt 36, Kohtla-Järve 31026, Ida-Viru maakond, Eesti
info@imsan.ee · +372 55516789
What we process and on what basis
- Order data — name, email, phone, delivery address, items ordered, measurements for made-to-measure goods. Basis: performance of a contract (GDPR Art. 6(1)(b)).
- Accounting data — invoices and payment confirmations. Basis: legal obligation (Art. 6(1)(c)), Accounting Act.
- Newsletter address — the email address the visitor entered in the form themselves. Basis: consent (Art. 6(1)(a)).
- Customer support correspondence — the content of the enquiry and contact details. Basis: legitimate interest in answering the enquiry (Art. 6(1)(f)).
- Technical data — IP address, device and browser data, pages visited. Basis: legitimate interest in keeping the store working and secure (Art. 6(1)(f)).
We do not process payment data: card details are entered in the payment provider's environment and never reach us.
Who we share data with
- Shopify Inc. — store platform and checkout, acting as a processor;
- carriers — Omniva, DPD, Venipak, Itella SmartPost and others, who receive the data needed to deliver the parcel;
- our accounting service provider — for processing invoices;
- public authorities — only where required by law.
Data is not sold or passed to third parties for marketing purposes.
Transfers outside the European Economic Area
Shopify servers may be located outside the European Economic Area. Transfers are made under the European Commission's Standard Contractual Clauses (SCC) or another basis permitted by Chapter V of the GDPR.
How long we keep data
- order and accounting data — 7 years from the end of the financial year, as required by the Accounting Act;
- newsletter address — until consent is withdrawn;
- support correspondence — up to 3 years;
- technical logs — up to 12 months.
Cookies
The store uses cookies necessary for the cart and session to work, and Shopify statistics cookies to measure use of the store. Cookies can be disabled in your browser settings, but the cart will not work without the necessary ones.
Newsletter
Subscribing to the newsletter is voluntary. Consent can be withdrawn at any time via the link at the bottom of every message or by writing to info@imsan.ee. Withdrawal does not affect the lawfulness of processing carried out before it.
Your rights
The data subject has the right to:
- access the data collected about them;
- have inaccurate data corrected;
- have data erased where there is no other basis for processing;
- request restriction of processing and object to processing;
- receive their data in a portable format;
- withdraw consent given.
To make a request, write to info@imsan.ee. We reply within one month.
Complaints
If you believe the processing of your data infringes your rights, you may contact the Estonian Data Protection Inspectorate: Tatari 39, Tallinn 10134, info@aki.ee, aki.ee.
Changes
Changes to this privacy policy are published on this page.