Privacy Policy
OÜ Table Tennis Products
1.What is the purpose of this Privacy Policy?
This privacy policy (hereinafter "Privacy Policy") gives you an overview of which personal data, for which purposes and how OÜ Table Tennis Products (hereinafter also "TT11" or "we") processes.
Additionally, the Privacy Policy explains the legal bases under which TT11 processes your personal data, data retention periods, your rights as a data subject as well as how you can exercise these rights.
2.When does this Privacy Policy apply?
This Privacy Policy applies under any of the following circumstances:
-
should you visit our website (https://www.tabletennis11.com/; “Website”), including its subdomains;
-
should you visit our pages on social media platforms (e.g. Facebook);
-
should you use the web store available through the Website ("Web Store"), including should you buy goods via the Web Store;
-
should you enter your e-mail address to the list of recipients of our newsletter receivers;
-
should you contact us via phone or any other means of electronic communication.
3.Who is the Data Controller and how to contact them?
The controller of your personal data is OÜ Table Tennis Products;
-
Registry code: 11518355;
-
E-mail address: [email protected];
-
Phone: +372 6007909;
-
Address: P. Kerese 40, 21003 Narva, Republic of Estonia.
Should you have any questions related to the processing of your personal data, please contact us via the e-mail address provided above.
4.For which purposes and under which legal bases does TT11 process my personal data?
We process your personal data only to the minimum extent necessary to achieve the purposes described below.
4.1.Registration and use of user accounts
For convenient shopping in the Web Store, you can (but are not obliged to) register a user account.
During the registering and use of a user account, we process the following personal data about you:
-
first and last name;
-
e-mail address;
-
phone number;
-
payment address;
-
delivery address.
Additionally, the data of your previous purchases, the content of agreements regarding payment for purchases, the feedback given to the goods and the information about sending you newsletters (presence or absence of a respective consent) are also stored under user account data.
The data provided during the registration and use of a user account are processed for the purpose of exercising the rights and obligations arising from the contract concluded between us, i.e. to enable the provision of the functionalities of the Web Store to a logged-in user.
4.2.Conclusion of sales contracts and exercising the rights and obligations arising thereof
Our Web Store offers a wide selection of various sports goods. When purchasing goods from the Web Store, a sales contract is concluded between us and you.
In order to conclude sales contracts and exercise the rights and obligations arising from them, we process the following personal data about you:
-
first and last name;
-
e-mail address;
-
phone number;
-
address;
-
related company data;
-
delivery method data;
-
payment method and payment means data;
-
order data;
-
user account data (in case of a logged-in user);
-
information that you have provided to us on your own initiative before or after the conclusion of the sales contract (e.g. content of e-mail correspondence).
The personal data described above is processed for the purpose of preparation, conclusion and execution of sales contracts.
4.3.Communication with suppliers and other cooperation partners
In order to offer and expand the selection of goods available in the Web Store, as well as to smoothly organize the delivery of purchased goods to buyers, we use the services of various cooperation partners in our activities. This includes ordering goods from them and establishing cooperative relations.
We process the following personal data of their contact person(s) in order to fulfil the contracts concluded with cooperation partners, including suppliers:
-
first and last name;
-
contact information (phone number, e-mail address);
-
position and right of representation.
In a situation where we approach a potential supplier or other cooperation partner ourselves, the legal basis for the processing of personal data is our legitimate interest. If possible, we always use the professional contact details of the legal person's contact person for such inquiries, whereby the processing of personal data of contact persons remains minimal.
4.4.Marketing activities and communication
If you have given us your respective consent, we will send you newsletters from time to time that contain information related to the goods sold in the Web Store and other information that may be of interest to you. In order to send you newsletters, we process the following personal data about you:
-
first and last name;
-
e-mail address.
The legal basis for sending newsletters is your consent, which you can give us by entering your e-mail address in the respective form on the Website and pressing the "Sign Up Now" button or checking the respective checkbox in your user account settings.
You have the right to withdraw your consent at any time by pressing the "unsubscribe" button in the newsletter or by unchecking the respective checkbox in your user account settings. You can also unsubscribe from newsletters by sending us a message with the respective request to the email address specified in Chapter Who is the Data Controller and how to contact them? of this Privacy Policy.
If you send us an e-mail or contact us by other electronic methods, depending on the chosen communication channel, you may provide us with your first and last name, e-mail address, user account data and possible additional personal data included in the content of your message. The legal basis for the processing of personal data provided by you on your own initiative, including the processing of personal data for the purpose of responding to a request, is the necessity to take measures prior to the conclusion of a contract between us and you or the necessity to perform an already concluded contract in accordance with your request (depending on the specific situation at hand).
4.5.Fulfilment of legal obligations
Under certain circumstances, we must process personal data to fulfil our legal obligations. This includes the following:
-
accounting obligations (reporting and retention of documentation);
-
responding to inquiries from government authorities;
-
informing supervisory authorities and individuals about (potential) violations.
In such situations, the legal basis for the processing of personal data is our legal obligation.
5.For how long is my personal data stored?
We store personal data only for the time for which it is necessary to fulfil the processing purposes stated in Chapter For which purposes and under which legal bases does TT11 process my personal data? of this Privacy Policy.
|
Purpose for processing |
Retention period |
|
1. Registration and use of user accounts |
3 years from the deletion of the respective user account. |
|
2. Conclusion of sales contracts and exercising the rights and obligations arising from them |
3 years from the conclusion of a sales contract. |
|
3. Communication with suppliers and other cooperation partners |
3 years from the end of the cooperation agreement or other form of cooperation, or the end of the negotiations concerning the conclusion of a potential agreement (in the situation where no agreement was concluded). |
|
4. Marketing activities and communication |
For marketing activities – until the respective consent is revoked.
For communication – up to 3 years after the conclusion of a respective sales agreement or settlement of claim. |
NB! In order to fulfil legal obligations and in other specific circumstances, we may retain personal data for a longer period than stated above, including: (see clause Error: Reference source not found):
For example, we retain all original accounting documentation (e.g. invoices) until the expiry of the statutory retention period as required by applicable law. In order to enable submission of claims or submission of objections to potential claims against us, we may retain personal data in accordance with the limitation periods for claims and, in case of ongoing disputes, until their final resolution.
6.From which sources do you receive personal data?
We receive personal data about you primarily directly from you as the data subject (based on your statements). In some cases, e.g. in the course of claim and debt management, we may also receive personal data about you from our cooperation partners.
7.Who has access to my personal data?
Access to your personal data is allowed to our staff strictly on a need-to-know basis in accordance with the duties arising from their employment contract or other similar documentation for the purpose of fulfilling their professional obligations. In certain cases, our cooperation partners, including agencies and freelancers, who provide us with specific services (e.g. accounting services, IT-services, marketing services) may also have limited access to your personal data.
8.Do you share my personal data with anyone else?
We may disclose your personal data to other parties only when a respective legal basis exists, including for the performance of a legal obligation.
W may use data processors (such as providers of accounting services, IT-services and marketing services) to fulfil specific tasks in our operations directly under the provisions of the GDPR. In such cases and in order to ensure a high level of data protection, confidentiality and compliance with all legal requirements as well as best practices, we have concluded a data processing agreement (hereinafter "DPA") with the relevant data processors as required by GDPR Article 28(3).
Please note that when paying for goods in the Web Store, you provide your personal data, including order data (order cost) to your chosen payment service provider. Payment service providers are independent controllers of personal data, and the data processing performed by them is not under our control. Therefore, we recommend that you familiarize yourself with the privacy policy of your chosen payment service provider.
As a general rule, we process personal data within the European Economic Area (hereinafter "EEA"). In some cases however (e.g. if you as a Buyer are located outside the EEA), your personal data may be transferred to recipients (such as Postal Services) outside the EEA. Your Personal Data will only be transferred outside the EEA provided that at least one of the following conditions is fulfilled:
-
we have signed a DPA with the respective recipient (our cooperation partner), which includes standard contractual clauses approved by the European Commission;
-
we have received a respective authorisation for the Data Protection Inspectorate of the Republic of Estonia to carry out such a transfer;
-
the European Commission has adopted an adequacy decision confirming that the country in which the recipient (our cooperation partner) is established ensures a high level of data protection; or
-
you have consented to such transfer of your personal data.
9.How does TT11 ensure the security and confidentiality of my personal data?
We have implemented technological, organizational as well as physical security measures to ensure the security of your personal data. Access to any personal data is strictly based on necessity and professional duties.
To ensure the confidentiality of payment data, we have implemented an encrypted data communication channel.
NB! Our Website may contain references and links to other websites, such as social media platforms and video platforms, that are controlled by third parties. Please note that when you click on such links or navigate to our groups/profiles on any social media platforms, you will be directed to a third-party website where data processing is not under our control. Therefore, we recommend that you also review the privacy policies of the respective third parties.
10.Which are my rights as a data subject?
Due to the processing of your personal data by TT11, you have the following rights as specified in the GDPR:
|
Data Subject right |
Meaning and applicability |
|
The right of access
|
You have the right to request information about whether and which personal data we process about you, on which legal basis and in what manner. You also have the right to request a copy of the personal data processed about you. |
|
The right to request correction of personal data |
You can use this right if the personal data we process about you is incomplete, out of date or incorrect. |
|
The right to be forgotten |
You can request deletion of your personal data if:
|
|
The right to restrict the processing of personal data |
You can request is to restrict the processing of your personal data if:
|
|
The right to object |
If the legal basis for processing your personal data is our legitimate interest, you have the right to object to the corresponding processing of personal data. You also have the right to object to any automated decision making by us and the processing of personal data related to direct marketing. |
|
The right to transfer personal data to another controller |
If we process your personal data on the basis of your consent or in order to fulfil a contract concluded between us, you have the right to demand that we provide you with the respective personal data in a structured, commonly used format and in a machine-readable form.
If it is technically feasible, you also have the right to request that we transfer the personal data to another data controller indicated by you. |
|
The right to withdraw consent at any time |
If the legal basis for the processing of your personal data is consent, you have the right to withdraw your consent at any time. Please note that withdrawal of consent does not affect the legality of prior data processing, which was based on valid consent. |
NB! Please note that the data subject rights described above are not absolute, and for each request we must assess whether and to what extent applicable data protection legislation allows us to satisfy your request. In order to prevent the abuse of personal data and data subjects’ rights, we kindly request that you electronically sign all requests aimed at exercising these rights.
11.What should I do in case I have questions or complaints?
Should you have any questions or complaints related to the processing of personal data, please do not hesitate to contact us via the e-mail address specified in Chapter Who is the Data Controller and how to contact them? of this Privacy Policy. We will respond to you within one month of receiving the question or complaint.
If you do not agree with the answer you received, you have the right to file a complaint with the Data Protection Inspectorate (address: Tatari 39, Tallinn 10134; e-mail: [email protected]; telephone: +372 627 4135) as well as with the respective data protection authority in your country.
Information about other data protection authorities in the European Union is available here.
12.Will this Privacy Policy be updated in the future?
We constantly strive to ensure that both the data processing activities we carry out as well as the related documentation are kept simple, clear, and transparent and meet all the requirements set forth in the legislation and the best data protection practices. Therefore, we regularly update, specify, and improve this Privacy Policy.
You can always find an up-to-date version of this Privacy Policy on our Website.
Version date: [20.10.2023]