Terms of privacy

This privacy policy applies to the use of and making purchases in the Online store gruusiapood.ee (hereinafter Online store) and the processing of data collected. The Online store is managed by Georgian Food & Wine OÜ, registry code 14122876, Viru väljak 2 Tallinn Harjumaa 10111, e-mail address info@gruusiapood.com. The privacy policy describes how company processes (incl. collects, uses, discloses, stores, transmits, deletes, etc.) personal information. It also provides information about your rights as data subject. Please read the privacy policy carefully before transferring data, using services, or concluding contracts. The privacy policy is inextricably linked to the terms of use of the Online store Link. In the case of matters not addressed in the privacy policy, company acts on the basis of applicable legislation.

  1. What types of personal information does gruusiapood.ee  process?
    1. Personal identification information and general information – name, surname, personal identification number, gender, Online shop username;
    2. Contact information – postal address, e-mail address, telephone number;
    3. Consumer behaviour data – preferred parcel machines, preferred payment methods, previously viewed products, data from previous searches etc.;
    4. Purchase data – receipt numbers, discount codes, account number, completed orders and purchases (including products, sums, store), gift card usage, etc.;
    5. Customer feedback – favourite products, ratings, e-mail statistics, etc.;
    6. Online store digital data – online cookies, login information, etc.
  2. How does gruusiapood.ee collect personal information?
    1. Astri collects personal information if the user engages in the following activities (in the context of this privacy policy, ‘user’ refers to the user of the Online store):
      1. registers an account (hereinafter account);
      2. enters the account information;
      3. performs searches and selects goods;
      4. makes a purchase and places an order;
      5. participates in campaigns (e.g., coupon campaigns organised by company);
      6. participates in the loyalty programme;
      7. transfers information via Customer Support.
    2. Gruusiapood.ee collects online cookies for all Web site visitors (including non-registered users).
  3. What is the purpose of processing personal information?
    1. Gruusiapood.ee processes the user’s first name, telephone number, address (if you choose delivery by courier), and e-mail address primarily for the purposes of selling and delivering goods and preparing, concluding, executing of a contract, as well as resolving any contractual disputes.
    2. If the user has transferred personal information to Gruusiapood.ee, the user may also voluntarily give Gruusiapood.ee permission to provide the user with information about their products (including Online store and physical shop) and services (direct marketing offers). If such permission is given, the company will process personal information for submitting offers, including personalised offers. The user can register the corresponding permission during signup or later on their account page (hereinafter via their account). To receive better offers, the user can add info about their gender, preferred location of purchase, favourite products, personal identification code, etc. Granting consent to direct marketing offers is voluntary and the user is entitled to withdraw their consent at any time via their account. This means that processing is terminated after consent is withdrawn.
    3. Gruusiapood.ee may also process personal information in other cases, where consent is given (for example, in the case of a loyalty programme or during participation in campaigns), in which case the purpose of processing shall be specified in the consent acquisition process. Each consent given for processing is voluntary and can be withdrawn at any time. This means that processing is terminated after consent is withdrawn.
    4. Gruusiapood.ee processes personal information to ensure fulfilment of the obligations arising from legislation. These obligations derive mainly from the European Union General Data Protection Regulation, the Personal Data Protection Act, the Law of Obligations Act, and other applicable laws.
    5. Gruusiapood.ee processes personal information if the company has legitimate interest, including for business interests and security (detection and prevention of fraud) reasons. For example, gruusiapood.ee has a legitimate interest in maintaining user information to protect their rights during the limitation period for claims arising from the contract. Company may also process data related to consumer behaviour based on legitimate interest. gruusiapood.ee collects data on user preferences for payment methods, parcel machines, and postal addresses, shops viewed, products and offers, searches, participation in campaigns, and other consumer behaviour, to provide the user with the most satisfying shopping experience and personalised service. In each case, company thoroughly assesses whether their interests for processing outweigh the interests and rights of the user. If company finds that processing is justified, they shall take adequate measures to ensure the protection of the user’s rights, including the fairness, impartiality, and accuracy of processing.

    1. Because of legislation, Gruusiapood.ee has the right and the responsibility to store collected personal data. Gruusiapood.ee shall not store personal information for longer than is necessary for the performance of company’s obligations arising from the legislation or those taken towards the user, or for the submission or defence of legal claims, unless the user has given permission for the extended storage and processing of data.
    2. Data related to the user account and purchases is usually stored by company during the active period of the account and three years after account deletion. If company has a reason to believe that the user has deliberately violated obligations taken towards gruusiapood.ee, then company is entitled to store user data for 10 years after account deletion. You can submit an application for the deletion of your account via your account.
    3. Gruusiapood.ee will keep your account within 5 years of your last purchase (active account), unless you have directly expressed the wish for deleting the account.
    4. Gruusiapood.ee maintains accounting records, including personal data contained therein, for a seven-year period from the end of the financial year, during which the business transaction was recorded in the accounting register as specified in the source document.
  1. To whom does Gruusiapood transmit personal information?
    1. Gruusiapood.ee transmits personal information to the extent and in the form required to fulfill the objectives specified in the privacy policy. Gruusiapood.ee may transfer personal information to the persons with whom you have entered into a sales contract when purchasing goods, in which case the processing of data may also be subject to the privacy policy of the corresponding vendor. Gruusiapood.ee may transmit personal information to authorised processors who require access to the information to provide service to company. Data disclosure takes place so that company can execute user contracts (fulfill orders).
    2. In general, gruusiapood.ee guarantees that the processing and storage of information takes place on the territory of the European Union, except for the user’s e-mail address, which the user has allowed to be used for making direct marketing offers. Company may also use the services of data processors whose servers are located outside the European Union. Gruusiapood.ee will ensure the complete security of your personal data, based on, among other things, the EU-US Privacy Shield Framework, or through the use of other data protection measures required by law.
    3. Company will also disclose personal information if it has a legal obligation to do so. Such an obligation for data disclosure may arise, for example, at the legitimate request of the authorities.
    4. company transfers the personal data necessary for the execution of payments to authorized processor Maksekeskus AS.
  1. Which rights does the user have with regard to the processing of their personal data?
    1. Gruusiapood.ee processes personal information in a manner consistent with the user’s rights and freedoms and in accordance with applicable law.
    2. The user is entitled to receive information about the types and sources of personal information collected, as well as the purposes for which they are being used. The user has the right to demand the transfer of personal data, including the transfer of personal data to another data controller. The required data is transmitted by e-mail in a machine-readable format.
    3. If the data is incorrect or inaccurate, the user has the right to request to have their data updated or corrected.
      • the personal data is no longer needed for the purpose for which Gruusiapood.ee processed them;
      • the user withdraws their consent for processing and no other legal basis for the processing of their personal data exists;
      • the user objects to the processing of personal data and no legitimate overriding reasons for continued processing exist;
      • personal data has been processed illegally;
      • personal data must be erased to comply with a legal obligation.
      • Please send all questions and requests regarding the processing of your personal information via your account. If you do not have a personal Online store account or you are unable to use it for some reason (for example, you are unable to log in), then you can contact company by e-mail: info@gruusiapood.com Company will respond to questions and requests within one month of notification of the question or request. Disputes shall be resolved through negotiation.
      • If the user is of the opinion that company has violated the user’s rights and it has not been possible to resolve the dispute by negotiation, the user has the right to contact the Data Protection Inspectorate or a competent court.

Gruusiapood.ee reserves the right to make changes to the privacy policy. The policy is updated primarily (but not exclusively) to comply with data protection legislation. The updates will be published in the Online store. Transactions shall be subject to the conditions applicable at the time of the transaction.

The privacy policy is published as of August 11 2020.