Processing of personal data

The controller of the personal data collected via the website of Hedon Apartments is Ringi Haldus OÜ (registry code 11249122), located at Suur-Jõe St 58, Pärnu, Pärnu County 80042, tel. +372 4479100, email andres.lelov@hedonspa.com. The data controller has appointed a data protection specialist, tel. +372 506 7830, email andres.lelov@hedonspa.com.

What personal data are processed

• name, phone number and email address
• address
• cost of services and payment data (purchase history).

Why personal data are processed

Personal data are used to manage the customers’ reservations. Purchase history details (date of purchase, service, amount, customer data) are used for the purpose of preparing summaries of purchased services and for providing services. Personal data such as email, phone number, customer name, are processed to handle any issues relating to the provision of services (customer support). The IP addresses of website visitors or other network identifiers are processed for the provision of the e-store service as an information society service, and for web usage statistics.

Legal grounds

Personal data are processed for the purpose of performing the contract concluded with the customer. Personal data are processed for performing legal obligations (such as accounting and resolution of consumer disputes).

Recipients of personal data

Personal data are transmitted to the website customer support for administration of purchases and purchase history, and for solving customer issues. If the accounting service is provided by a service provider, personal data are transmitted to the service provider for the purpose of performing accounting services. Personal data may be transmitted to information technology service providers, if it is required for ensuring the website functionality or data hosting. The company shall transmit the personal data required for execution of the payments to the processor Maksekeskus AS.

Security and access to data

Personal data are stored in Zone servers located on the territory of a European Union member state or states within the European Economic Area. Access to personal data is granted to employees who view the personal data in order to solve technical issues related to website usage and to provide the customer support service. The company applies the necessary physical, organisational and IT-related security measures to protect the personal data from accidental or unlawful destruction, loss, alteration, unauthorised access and disclosure.

Revocation of consent

If personal data are processed under the customer’s consent, then the customer is entitled to withdraw the consent by informing the customer support thereof via email.

Storage

In the event of disputes concerning payments and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period. Personal data required for providing the accounting service are stored for seven years.

Erasure

To erase personal data, the customer is required to contact the customer support via email. Requests for erasure are responded to no later than within one month, and the period of erasure shall be specified.

Transmission

Requests to transmit personal data submitted via email are responded to within one month. Customer support identifies the person and indicates what personal data are to be transmitted.

Disputes concerning the processing of personal data are settled through customer support: tel. (+372) 4499000 or info@hedonspa.com. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).