PRIVACY POLICY

This is a translation. In case of any discrepancy, the Estonian version of this policy prevails.

Processing of personal data

Personal data is processed by Dream Studio OÜ, reg. no. 14226430. Email: info@canyouescape.eu. Dream Studio OÜ forwards the personal data necessary for making payments to the processor Stripe.com.

Personal data processed

  • First and last name
  • Email
  • Phone number
  • Cost of goods and services
  • Bank account number

Purpose of processing personal data

Personal data is used to manage customer orders and to send the service. The bank account number is used to refund payments to the customer. Personal data such as email, phone number and customer name is processed to resolve questions related to the provision of goods and services (customer support).

Legal basis

Personal data is processed for the performance of the contract concluded with the customer. Personal data is processed to fulfil legal obligations (e.g. accounting and resolving consumer disputes).

Recipients of the data

Personal data is forwarded to the online shop's customer support to manage purchases and purchase history and to resolve customer issues. Personal data is forwarded to the accountant providing services to the service provider. The personal data necessary for making payments is forwarded to the processor Stripe.com.

Security and access to data

Personal data can be accessed by the online shop's employees, who may view personal data in order to resolve technical issues related to the use of the online shop and to provide customer support. The online shop applies appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure. Personal data is forwarded to the online shop's processors (e.g. data hosting and Stripe.com) on the basis of contracts concluded between the online shop and the processors. Processors are obliged to ensure appropriate safeguards when processing personal data.

Access to and correction of personal data

Personal data can be corrected by contacting the online shop administrator by email at info@canyouescape.eu.

Withdrawal of consent

If personal data is processed on the basis of the customer's consent, the customer has the right to withdraw consent by notifying customer support by email.

Retention

If a purchase has been made in the online shop without a customer account, the purchase history is kept for three years. In case of disputes related to payments and consumer disputes, personal data is kept until the claim has been fulfilled or until the end of the limitation period. Personal data needed for accounting is kept for seven years.

Deletion

To have personal data deleted, contact customer support by email. Deletion requests are answered no later than within one month, specifying the period in which the data will be deleted.

Direct marketing messages

The email address is used to send direct marketing messages if the customer has given the corresponding consent. If the customer does not want to receive direct marketing messages, they should select the corresponding link in the email footer or contact customer support. If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support by email (info@canyouescape.eu).

Dispute resolution

Disputes related to the processing of personal data are resolved through customer support (Dream Studio OÜ, reg. no. 14226430, email: info@canyouescape.eu). The supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, info@aki.ee).