Privacy Policy
1. General Provisions
1.1. This privacy policy complies with the European
Union General Data Protection Regulation (GDPR) and Estonian laws.
1.2. The privacy policy regulates the collection,
processing, and storage of personal data.
1.3. The controller of personal data is CBA PARTS OÜ,
registration code 16933952, address: Tallinn, Vindi tn. 9-11, 11315.
1.4. CBA PARTS OÜ reserves the right to amend the
privacy policy by making it available on the website abcparts.ee.
1.5. The data subject agrees to the privacy policy
when placing an order in the online store.
1.6. The data subject is responsible for the accuracy
of the data provided.
2. Legal Basis for Processing Personal Data
2.1. The basis for processing personal data is the
data subject's consent, contract, legal obligation, or legitimate interest.
2.2. Personal data is processed for the purpose of
establishing a customer relationship and fulfilling a contract.
3. Processing of Personal Data
3.1. Processed personal data: name, phone number,
email address, address, payment method, purchase history, bank account number,
and customer service call recordings.
3.2. Bank card data is processed through secure
service providers such as PayPal и Everypay - Monito?.
4. Purpose of Processing Personal Data
4.1. Personal data is used to manage, fulfill, and
deliver orders, resolve issues related to purchase history, and process
refunds.
5. Retention of Personal Data
5.1. Personal data is stored in databases located
within the territories of European Union member states.
5.2. Personal data is retained according to the
timelines prescribed by legal regulations.
6. Data Subject's Rights
6.1. The data subject has the right to receive
information about the processing of their personal data, request access to
their data, and demand the correction of inaccurate data or the completion of
incomplete data.
6.2. The data subject has the right to request the
deletion of their personal data if the data is no longer needed for the
purposes for which it was collected or processed, or if the data subject
withdraws their consent on which the processing is based.
6.3. The data subject has the right to restrict the
processing of their data if the accuracy of the data is disputed, if the
processing is unlawful, if the data subject has objected to the processing, or
if the controller no longer needs the data but the data subject needs it to
prepare, present, or defend legal claims.
6.4. The data subject has the right to receive their
personal data in a structured, commonly used, and machine-readable format and
transmit it to another controller without hindrance from the current data
processor.
6.5. The data subject has the right to object to the
processing of their personal data, including profiling, and not to be subject
to decisions based solely on automated processing, unless the decision is
necessary for entering into or performing a contract between the data subject
and the data controller, is permitted by Union or member state law, or is based
on the data subject's explicit consent.
6.6. The data subject has the right to lodge a
complaint with the data protection supervisory authority if they believe their
personal data is being processed in violation of the General Data Protection
Regulation.
7. Use of Cookies
7.1. The website uses cookies to provide a better user
experience and collect statistical data.
7.2. Cookies collect data about the use of the
website, including the IP address, browsing history, and user preferences.
7.3. Users may disable cookies in their browser
settings, but this may affect the functionality of the website.
8. Security
8.1. The data processor applies appropriate technical
and organizational measures to protect personal data from accidental or
unlawful destruction, loss, alteration, unauthorized disclosure, or access.
8.2. Security measures include data encryption,
firewalls, access controls, and employee training.
9. Contact Information
9.1. The data subject may contact the data processor with questions regarding the privacy policy or the processing of their personal data via email at abcparts.eesti@gmail.com or by mail at Tallinn, Vindi tn. 9-11, 11315.