Privacy policy

This privacy policy regulates the principles regarding collecting, processing, and storing personal data. Personal data is collected, processed, and stored by the personal data controller Ada Johanna OÜ, reg code 16451383, address: Hariduse 12-16, Viljandi 71011 (hereinafter the data processor).

Contacts:

e-mail: info@adajohanna.ee,

phone: +37253444903

We process data, including personal data (such as the customer’s or his representative’s first and last name, delivery address, e-mail, and telephone) (hereinafter data) in the following cases:

1) when submitting an order to fulfill it

2) in fulfilling responsibilities arising from the law for fulfilling obligations. In general, we collect data directly from the data subject with their consent.

In addition, we also use cookies to optimize our website’s user experience and to provide a better service to the customer. The legal basis for data processing is of legitimate interest, and we are primarily guided by the General Regulation on Personal Data Protection and the Personal Data Protection Act. By sharing their personal data, the data subject gives the data processor the right to collect, organize, use and manage personal data for the purposes defined in the privacy policy, which the data subject directly or indirectly shares with the data processor when purchasing goods on the website. The data processor is not responsible for damage to the data subject or third parties caused by the data subject providing false information.

Data processor:
The responsible data processor is Ada Johanna OÜ (16451383, address: Hariduse 12-16, Viljandi 71011). The controller may transfer data for processing to authorized processors (for example, website developer, transport service provider, payment service provider, SMS service provider, or server hosting service provider) with whom the controller has a contractual relationship.

Data retention
We retain the data for as long as it is necessary to fulfill the purposes mentioned above, protect our rights, or fulfill our legal obligations.

Data protection 
The goal is to prevent unauthorized data processing by ensuring need-based access to data and preventing unauthorized disclosure of data. For this purpose, we use organizational, physical, and information technology security measures. Employees of the data processor are obliged to comply with all data protection rules arising from the law when processing data.

Rights of the data subject

• The right to receive information about what data we process and how.
• The right to withdraw consent at any time if the data is processed on the basis of consent.
• The right to request data deletion if the data is processed based on consent and the consent has been withdrawn or if the data retention period has expired and the data does not need to be archived.
• The right to request the correction of data if it has changed or is otherwise insufficient or incorrect.
• The right to appeal to the Data Protection Inspectorate or the court.