Privacy policy
Chocolala has assumed the obligation to protect privacy of their customers and users. Therefore, we have prepared these Privacy Policy principles, which govern the collection, use, disclosure, transmission and storage of customer data. Our operations on the Internet comply with all relevant practices, as well as respective EU legislation and laws of the Republic of Estonia. Please take a moment and review the principles we apply to privacy.
Collection and use of personal data
Personal data means any data that can be directly or indirectly associated with you as an individual, which are collected and processed by Chocolala in order to fulfill contracts concluded with natural persons, to contact them, and perform obligations pursuant to law.
Personal data of loyal customers can be collected in any of the following ways:
• when you provide us your contact information (incl. your name, personal ID code, postal address, telephone number, e-mail address, the preferred method of communication) on our website or otherwise (i.e. in our stores);
• when you use our website, data are collected through your account or through cookies;
• when you make a purchase or place an order in our store or e-shop and store your personal contact information or purchasing preferences (in certain sections of the website Chocolala may ask you to voluntarily provide your personal data and personal information. Such personal data may include your name, address, postal code, e-mail address, telephone number, and other data)
Collection of other data
We also collect non-personal data, i.e. data that cannot be directly linked to a particular individual (gender, age, language preference, location).
We may also collect data of general nature about how our customers interact with our e-shops and the website. These data are combined and used to provide customers information that is more useful for them, and to learn about which parts of the website, products, and services attract the most interest. In this Privacy Policy such combined data are regarded as non-personalized data.
Use and storage of collected personal data
We can use any personal data we have collected to display for customers Chocolala product news, campaigns and upcoming events. Customers who wish to opt out from our newsletter mailing list, or do not wish to get information about products that might interest them, may unsubscribe from the mailing lists at any time.
We also use personal data that we collect to deliver goods, and to fulfill obligations that we may have assumed towards the customer.
By agreeing with the terms and conditions of the Privacy Policy the customer gives Chocolala their consent for automated processing of their data. You may revoke your consent at any time on our website, or by sending us a request in a format reproducible in writing. Such requests and consents do not have retroactive effect.
To ensure better customer service, Chocolala may disclose information about individual users to a third party who provides services to Chocolala and is contractually bound to keeping any shared information confidential. Such third party may be, for instance, our partner whose duty is to deliver goods sold in our e-shop.
Chocolala stores all personal data of a client until the loyal customer contract terminates. Data that Chocolala must store pursuant to law (e.g. accounting data) are stored by Chocolala in accordance with the provisions of law.
Alterations to personal data
Customers can see, alter, and supplement their personal data, collected for the purpose of identification and communication with them, on our website in the “My Data” section.
Should the change involve your e-mail address (your Chocolala website user name), you are kindly asked to notify us thereof, because customers cannot change their e-mail address themselves.
Security of personal data
Chocolala takes all precautions (incl. administrative, technical, and physical measures) to protect customers’ personal data. Only authorized persons have access to personal data for making alterations and processing the same.
If you suspect that your personal data are treated contrary to what is described in this Privacy Policy, or if there is any risk that your data have leaked to authorized parties, please notify us immediately. This is the only way that allows us to minimize any potential damages.
Customers have the right to demand termination of the processing of their data, ask about how their data are used, request that their data be transmitted in a commonly used format either to themselves or to a third party. In order to avoid misuse of customer data and rights, such requests may only be submitted in a format that makes it possible to identify the person submitting that request (signed digitally or personally at the company’s office). We have the right to respond to such requests within 30 days.
We regard a request to terminate processing of data as a request to terminate the loyal customer contract.
Security
Any personal data that you provide while visiting and shopping in Chocolala e-shop are considered confidential information.
The use of encrypted data transmission channel with banks guarantees that personal data and bank particulars of buyers are protected.
Terms and conditions of, and amendments to Privacy Policy
By starting to use our website or completing the loyal customer application you confirm that you have read these principles, terms and conditions, and agree with them. We reserve the right to amend the general terms and conditions of this Privacy Policy, if necessary, by notifying all loyal customers thereof, but we make our best effort to ensure that our Privacy Policy is kept updated and available for you on our website.
The controller in charge of processing customers’ personal data is Chocolala OÜ. If you have any questions or concerns about the privacy policy or data processing, you are kindly asked to contact us at info@chocolala.ee
You may always contact the Data Protection Inspectorate or a court to protect your personal data. The Data Protection Inspectorate is a national authority that may also be contacted for advice or assistance in matters concerning protection of personal data.