Processing of personal data

The controller of personal data processed by the e-shop Idakorea.ee is Verona Baltic OÜ, registration code 11874848, address 2 Tartu Põik 2d, Jõhvi and e-mail info@idakorea.ee (hereinafter "merchant“).

What personal data is processed

  • name;
  • contact information, such as phone number and e-mail address;
  • payer and delivery address;
  • bank account number;
  • the cost of goods and services and payment details (purchase history);
  • customer support details;
  • other information related to customer surveys and/or offers.

Purposes for which personal data is processed

The processing of personal data is carried out for the purpose of the performance of a contract with a customer. Processing of personal data for the performance of a legal obligation (e.g. accounting and consumer dispute resolution). 
Personal data is used for the management of customer orders and the delivery of goods. 
Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased and to analyse customer preferences. 
The bank account number is used to return payments to the customer. 
Personal data, such as e-mail address, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support). 
The e-shop user's IP address or other network identifiers are processed for the purpose of providing the e-shop as an information society service and for the purpose of web usage statistics. 

Transfer of personal data to processors

The Merchant shall keep confidential the personal data of the Customer that have become known to it in the course of registration and use of the User Account and shall disclose them to third parties only with the Customer's consent, unless the obligation or right to disclose the data arises from legislation. The user of the e-shop agrees that the trader has the right to process his/her personal data in order to provide the customer with the appropriate services, including the transmission of the customer's data to persons connected with the provision of the service by the trader to the customer. List of authorised processors:

Business software - for accounting transactions

  1. Merit Software

Suppliers - to deliver orders to the customer:

  1. DPD
  2. Itella
  3. Omniva

Payment Intermediaries - to pay for orders

  1. Swedbank
  2. SEB
  3. Luminor
  4. LHV
  5. Coop
  6. Montonio Finance UAB
  7. PayPal

Collecting statistics - gathering information to improve the e-shop user experience:

  1. Google Analytics
  2. Facebook

Accessing and correcting personal data

Personal data stored in the e-shop can be accessed and corrected in the e-shop account management. If a purchase is made as a guest (without a user account), personal data can be requested via the data request form. 

Withdrawal of consent

Where the processing of personal data is based on the consent of the customer.

Storage at

When you close your e-shop customer account, your personal data will be deleted, unless such data needs to be stored for accounting purposes or to resolve consumer disputes. 

If the purchase is made online as a guest (without a user account), the personalised purchase history is kept for three years. 

In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires (three years). 

Personal data necessary for accounting purposes are kept for seven years. 

Deletion

You can request the deletion of personal data stored in the e-shop by contacting - info@idakorea.ee. A response to a request for deletion will be given within a maximum of one month and, if necessary, the period of deletion will be specified.

Direct marketing communications

The email address and telephone number will be used to send direct marketing messages. If the customer does not wish to receive direct marketing messages, they should select the appropriate reference in the footer of the email or in the telephone message or contact customer support. 

Where personal data is processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his or her personal data, including profiling in relation to direct marketing, by informing Customer Support by e-mail. 

Dispute resolution

Disputes relating to the processing of personal data will be resolved through customer support. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee). Consumer Protection Committee and ODR platform