Collection and use of personal data
Personal data is data that can be directly or indirectly referred to you as a private person, which XISTORE.EU collects in order to fulfill the terms of the contract concluded with a private person, or in order to contact him in the future, as well as to fulfill obligations arising from the law. XISTORE.EU forwards the personal data necessary for making payments to the authorized partner Maksekeskus AS.
We collect personal data of regular customers:
when you provide your contact details (including name, personal code, postal address, telephone number, e-mail address, preferred method of communication) on our website, or elsewhere (e.g. in a store);
when you use our website, from customer account information or using cookies;
when making a purchase or placing an order in our store or online store in the course of providing personal contact information or when saving data on consumer preferences (in some sections of the XISTORE.EU website, you may ask you to voluntarily submit personal data and personal information. The required personal data may include Your name, address, zip code, email address, telephone number and other data);
when applying for an installment plan.
Collection of other data
We also collect anonymized data, i.e. data that cannot be attributed to a specific person (gender, age, language preference, location).
Use of collected personal data
We use the collected personal data to inform XISTORE.EU customers about new products, campaigns, and upcoming events. Customers who do not want to receive our newsletter or information about potentially interested in their products can at any time remove themselves from the address list of the target group.
In addition, we use the collected personal data to deliver goods and to fulfill our obligations to customers.
In order to better serve customers, XISTORE.EU has the right to provide information about individual users to third parties providing services to XISTORE.EU and bound by a non-disclosure agreement. Third parties, for example, are our business partners whose responsibilities include the delivery of goods purchased in the online store or the provision of installment services.
XISTORE.EU retains the personal data of the client until the termination of the loyal client agreement. The data that XISTORE.EU is obliged to retain by law (eg accounting data) is stored in accordance with the requirements established by law.
Changes to the collected personal data
The personal data collected for identification of the client and communication with him can be viewed, changed and supplemented on our website in the “My Information” section.
If your e-mail address changes (used as the username of the XISTORE.EU website), then please notify us about it, since the client himself cannot change this information.
Security of personal data
XISTORE.EU takes all precautions (incl. administrative, technical, and physical measures) to protect customers’ personal data. Only authorized persons have access to personal data for making alterations and processing the same.
Customers have the right to demand termination of the processing of their data, ask about how their data are used, request that their data be transmitted in a commonly used format either to themselves or to a third party. In order to avoid misuse of customer data and rights, such requests may only be submitted in a format that makes it possible to identify the person submitting that request (signed digitally or personally at the company’s office). We have the right to respond to such requests within 30 days.
We regard a request to terminate processing of data as a request to terminate the loyal customer contract.
Any personal data that you provide while visiting and shopping in XISTORE.EU e-shop are considered confidential information.
The use of encrypted data transmission channel with banks guarantees that personal data and bank particulars of buyers are protected.
You may always contact the Data Protection Inspectorate or a court to protect your personal data. The Data Protection Inspectorate is a national authority that may also be contacted for advice or assistance in matters concerning protection of personal data.