Privacy policy applies to the use of and making purchases in the website www.latene.ee (hereinafter referred to as E-Boutique) and the processing of data collected by the Esoteric Boutiques La Tene (hereinafter referred to as Boutique). The E-boutique and Boutiques (Kuressaare Kauba 14a and Tallinn Tartu mnt 50) are managed by Must Kass OÜ (registry code 12677535, address Kadaka talu, Muratsi küla, Saaremaa parish, 93859). For the sake of clarity and simplicity the manager of E-boutique and Boutique shall, in the context of the privacy policy, be referred as Latene. Latene is the responsible controller of the collected personal data. The privacy policy describes how Latene processes (incl. collects, uses, discloses, stores, transmits, deletes, etc.) personal information. It also provides information about your rights as data subject. Please read the privacy policy thoroughly before transferring data, using services, and before entering into contract. Privacy Policy is inextricably linked with the Terms of E-Boutique. In the case of matters not regulated by the privacy policy, Latene acts on the basis of applicable legislation.

What type of personal information Latene processes?

  1. Personal identification number, gender, E-boutique user name;
  2. Contact information – postal address, e-mail address, telephone number;
  3. Consumer behaviour data – preferred parcel machines, preferred payment methods, preferred products, searches, etc.;
  4. Purchase data – receipt numbers, discount codes, account number, completed orders and purchases (including products, sums, store), gift card usage, etc.;
  5. Customer feedback – favourite products, favourite stores, ratings, e-mail statistics, etc.;
  6. E-boutique digital data – online cookies, login information, etc.

How does Latene collect personal information?

  1. Latene collects personal information if the used engages in the following activities (in the context of the privacy policy, “user” refers to the used or the E-boutique as well as the visitor of the Boutique):
  2. Latene collects online cookies from all the E-boutique visitors (including non-registered users).

What is the purpose of processing personal information?

  1. Latene process the user´s first name, telephone number, address (if you choose delivery by courier) and e-mail address primarily for the purposes of selling and delivering goods and preparing, concluding, executing of a contract, as well as resolving any contractual disputes.
  2. If the user has transferred personal information to Latene, the user may voluntarily give Latene permission to provide the used with information about their products (incl. E-boutique and Boutique) and services (direct marketing offers). If such permission is given, Latene will process personal information for submitting offers, including personalised offers. The user can register the corresponding permission during sign-up. Granting consent to direct marketing offers is voluntary and the user is entitled to withdraw their consent at any time via their account. This means that processing is terminated after consent is withdrawn.
  3. Latene processes personal information to ensure fulfilment of the obligations arising from legislation. These obligations derive mainly from the European Union General Data Protection Regulation, the Personal Data Protection Act, the Law of Obligations Act, and other other applicable laws. For example, data on the user purchases is processed by Latene as part of these legal obligation, which is required for accounting purposes.
  4. Latene processes personal information if the company has legitimate interest, including for business interests and security (detection and prevention of fraud) reasons. For example, Latene has a legitimate interest in maintaining user information to protect their rights during the limitation period for claims arising from the contract. Latene may also process data related to consumer behaviour based on legitimate interest. Latene collects data on users preference for payment methods, parcel machines, and postal addresses, searches, participation in campaigns, and other consumer behaviour, to provide the user with the most satisfying shopping experience and personalised service. In each case, Latene thoroughly assesses whether their interests for processing outweigh the interests and rights of the user. If Latene finds that processing is justified, they shall take adequate measures to ensure the protection of the user´s rights, including the fairness, impartiality, and accuracy of processing.

How long does Latene store personal data?

  1. Because of legislation, Latene has the right and the responsibility to store collected data. Latene shall not store personal information for longer than necessary for the performance of Latene´s obligations arising from the legislation or those taken towards the user, or the submission or defence of legal claims, unless the user has given permission for the extended storage and processing of data.
  2. Data related to the user account and purchases is usually stored by Latene during the active period of the account and three years and three months after account deletion. If Latene has a reason to believe that the user has deliberately violated obligations taken towards Latene, then Latene is entitled to store data for 10 years and three months after account deletion. You can submit and application for the deletion of you account via your account.
  3. Latene will keep your account within 5 years of your last purchase (active account), unless you have directly expressed the wish for deleting the account. If you have not made any purchases within 5 , Latene will send you an inquiry to verify the activity of the account. If you do not respond to the inquiry within that time limit specified therein, Latene shall assume that your account is inactive and may delete your account.
  4. Latene maintains accounting records, including personal data contained therein, for a seven year period from the end of the financial year, during which the business transaction was recorded in the accounting register as specified in the source document.
  5. If you would like more information about how your data is being stored, please submit and applicant via your account.

To whom does Latene transmit personal information?

  1. Latene transmits personal information to the extent and in the form required to fulfil the objectives specified in the privacy policy. Latene may transfer personal information to the persons with whom you have entered into a sales contract when purchasing goods. Latene may transmit personal information to authorized processors who require access to the information to provide service to Latene. Data disclosure takes place so that Latene can execute user contracts (fulfil orders).
  2. In general, Latene guarantees that the processing and storage of information takes place on the territory of the European Union, except for the user´s e-mail address, which the user has allowed to be used for making direct marketing offers. Latene may also use the services of data processors whose servers are located outside the European Union. Latene will ensure the complete security of your personal data, based on, among other things, the EU-US Privacy Shield Framework, or through the use of other data protection measures required by law.
  3. Latene will also disclose personal information if Latene has a legal obligation to do so. Such an obligation of data disclosure may arise, for example, at the legitimate request of the authorities.

Which rights does the user have with regards to the processing of their personal data?

  1. Latene processes personal information in a manner consistent with the user´s rights and freedoms and in accordance with applicable law.
  2. The user is entitled to receive information about the types and sources of personal information collected, as well as the purpose for which they are being used. The user can view the collected data in the E-boutique on their account page. The user is entitled to receive copies and extracts of the personal data processed by Latene. The user has the right to demand the transfer of personal data, including the transfer of personal data to another data controller. The required data is transmitted by e-mail in a machine-readable format.
  3. If the data is incorrect or inaccurate, the user has the right to request to have their data updated or corrected.
  4. The user has the right to request the deletion of personal information. The processing of personal data will not be terminated if this would be contrary to the obligation to process personal data or there are other grounds for continuing processing. It is also important to note that termination of the processing of personal data may hinder the provision of the service. In particular, you have the right to request the termination of the processing of personal data and deletion of data if:
  5. Please send all questions and requests regarding the processing of your personal information via you account. If you do not have a personal E-boutique account or you are unable to use it for some reason (for example, you are unable to log in), then you can contact Latene by e-mail: e-butiik@latene.ee. Latene will respond to questions and requests within one month of notification of the question or request. Disputes shall be resolved through negotiation.
  6. If the user is of the opinion that Latene has violated the user´s rights and it has not been possible to resolve the dispute by negotiation, the user has the right to contact the Data Protection Inspectorate or a competent court.

Latene reserves the right to make changes to the privacy policy. The policy is updated primarily (but not exclusively) to comply with data protection legislation. The updates will be published in the E-boutique. Transactions shall be subject to the conditions applicable at the time of the transaction.

The privacy policy is published as of 25 May 2018.