Privacy Policy
1. The data controller responsible for personal data is Baltic Techinvest OÜ (registration number 10889115).
2. Processing of personal data adheres to Estonian and European Union legislation.
3. The data controller collects the following personal data: name, gender, personal identification code, phone number, email, and purchase history. Registration is not allowed for individuals under 18 years of age.
4. Among other purposes, personal data is processed and collected for the following reasons: to conduct purchase analyses, for the sale of goods and provision of services, and to manage the customer loyalty program. The data controller has the right to make queries in the personal data database, analyze the data, sort it, and make selections.
5. The data controller will not disclose the data that has become known to them to third parties.
6. By joining the customer program, the customer consents to the processing of their personal data. Personal data transmitted to the data controller is protected and treated as confidential information, including data stored in the online store's ordering environment regarding the customer and their orders. Communication between the customer and the banks and card payment center is encrypted, ensuring the security of the customer's personal data and banking details. The data processor does not have access to the customer's confidential banking and payment card details.
7. The data controller implements all measures, including information technology and organizational measures, to protect the collected personal data. Access to modify and process the data is limited to authorized individuals only.
8. Baltic Techinvest OÜ may authorize other legal entities (authorized processors) to process personal data, provided that a contract has been concluded with such processor stipulating that the authorized processor is obliged to keep the personal data confidential and ensure the protection of personal data in accordance with legal requirements. Such authorized processors include cash register software providers, software development partners, logistics service providers, and marketing service providers.
9. Baltic Techinvest OÜ will make the current list of authorized processors available to the customer upon request, which is submitted in writing to the address of Baltic Techinvest OÜ or to the email address info@mr-plussize.com.
10. The customer has the right at any time to obtain information and review their personal data, request access to their personal data, request correction of their personal data, request restriction of their personal data, request deletion of their personal data, request transfer of their personal data, rights related to automated processing, and the right to an assessment by a supervisory authority. The customer also has the right to withdraw previously given consent for the processing of personal data. To obtain information and review, the customer must submit a written request to the address info@mr-plussize.com.
11. The data controller responsible for personal data may send newsletters to the customer, including satisfaction surveys and offers, to the customer's email address or via SMS only if the customer has previously consented at the time of joining the customer program or within the self-service environment.
12. At any time, the customer can opt out of receiving offers and newsletters by logging into the self-service environment at www.mr-plussize.com, notifying via email to info@mr-plussize.com, or following the instructions provided in the email.
13. At any time, the customer can access and partially modify their personal data by logging into the self-service environment at www.mr-plussize.com or by sending the respective request to info@mr-plussize.com. To delete collected personal data, the customer must submit a written request to info@mr-plussize.com.
14. The data controller will change and/or delete the customer's data after the customer's identity has been verified.
15. The retention period for the customer's personal data is five years from the last purchase.
16. If personal data is processed for a different purpose than the one for which it was originally collected, or it is not based on the consent given by the data subject, Baltic Techinvest OÜ will carefully assess the permissibility of such new processing. In determining whether the new purpose of processing is consistent with the original purpose for which the personal data were collected, Baltic Techinvest OÜ takes into account, among other things:
(1) the relationship between the purposes for which the personal data were collected and the purposes of the intended further processing;
(2) the context in which the personal data were collected, particularly the relationship between the data subject and Baltic Techinvest OÜ;
(3) the nature of the personal data;
(4) the possible consequences of the intended further processing for the data subjects;
(5) the existence of appropriate protective measures.
17. Baltic Techinvest OÜ may unilaterally change the terms of the privacy policy in accordance with the law. Baltic Techinvest OÜ will notify data subjects of changes on the website www.mr-plussize.com.
18. Baltic Techinvest OÜ uses cookies on its websites, notifying the customer and requesting their consent.
19. Baltic Techinvest OÜ is the data controller responsible for personal data, which transmits the necessary personal data to the authorized processor Stripe or Maksekeskus AS for the execution of payments.
20. Baltic Techinvest OÜ is the data controller responsible for personal data, the Baltic Techinvest OÜ company transmits the necessary personal data to the authorized processor Maksekeskus AS for the execution of payments.
2. Processing of personal data adheres to Estonian and European Union legislation.
3. The data controller collects the following personal data: name, gender, personal identification code, phone number, email, and purchase history. Registration is not allowed for individuals under 18 years of age.
4. Among other purposes, personal data is processed and collected for the following reasons: to conduct purchase analyses, for the sale of goods and provision of services, and to manage the customer loyalty program. The data controller has the right to make queries in the personal data database, analyze the data, sort it, and make selections.
5. The data controller will not disclose the data that has become known to them to third parties.
6. By joining the customer program, the customer consents to the processing of their personal data. Personal data transmitted to the data controller is protected and treated as confidential information, including data stored in the online store's ordering environment regarding the customer and their orders. Communication between the customer and the banks and card payment center is encrypted, ensuring the security of the customer's personal data and banking details. The data processor does not have access to the customer's confidential banking and payment card details.
7. The data controller implements all measures, including information technology and organizational measures, to protect the collected personal data. Access to modify and process the data is limited to authorized individuals only.
8. Baltic Techinvest OÜ may authorize other legal entities (authorized processors) to process personal data, provided that a contract has been concluded with such processor stipulating that the authorized processor is obliged to keep the personal data confidential and ensure the protection of personal data in accordance with legal requirements. Such authorized processors include cash register software providers, software development partners, logistics service providers, and marketing service providers.
9. Baltic Techinvest OÜ will make the current list of authorized processors available to the customer upon request, which is submitted in writing to the address of Baltic Techinvest OÜ or to the email address info@mr-plussize.com.
10. The customer has the right at any time to obtain information and review their personal data, request access to their personal data, request correction of their personal data, request restriction of their personal data, request deletion of their personal data, request transfer of their personal data, rights related to automated processing, and the right to an assessment by a supervisory authority. The customer also has the right to withdraw previously given consent for the processing of personal data. To obtain information and review, the customer must submit a written request to the address info@mr-plussize.com.
11. The data controller responsible for personal data may send newsletters to the customer, including satisfaction surveys and offers, to the customer's email address or via SMS only if the customer has previously consented at the time of joining the customer program or within the self-service environment.
12. At any time, the customer can opt out of receiving offers and newsletters by logging into the self-service environment at www.mr-plussize.com, notifying via email to info@mr-plussize.com, or following the instructions provided in the email.
13. At any time, the customer can access and partially modify their personal data by logging into the self-service environment at www.mr-plussize.com or by sending the respective request to info@mr-plussize.com. To delete collected personal data, the customer must submit a written request to info@mr-plussize.com.
14. The data controller will change and/or delete the customer's data after the customer's identity has been verified.
15. The retention period for the customer's personal data is five years from the last purchase.
16. If personal data is processed for a different purpose than the one for which it was originally collected, or it is not based on the consent given by the data subject, Baltic Techinvest OÜ will carefully assess the permissibility of such new processing. In determining whether the new purpose of processing is consistent with the original purpose for which the personal data were collected, Baltic Techinvest OÜ takes into account, among other things:
(1) the relationship between the purposes for which the personal data were collected and the purposes of the intended further processing;
(2) the context in which the personal data were collected, particularly the relationship between the data subject and Baltic Techinvest OÜ;
(3) the nature of the personal data;
(4) the possible consequences of the intended further processing for the data subjects;
(5) the existence of appropriate protective measures.
17. Baltic Techinvest OÜ may unilaterally change the terms of the privacy policy in accordance with the law. Baltic Techinvest OÜ will notify data subjects of changes on the website www.mr-plussize.com.
18. Baltic Techinvest OÜ uses cookies on its websites, notifying the customer and requesting their consent.
19. Baltic Techinvest OÜ is the data controller responsible for personal data, which transmits the necessary personal data to the authorized processor Stripe or Maksekeskus AS for the execution of payments.
20. Baltic Techinvest OÜ is the data controller responsible for personal data, the Baltic Techinvest OÜ company transmits the necessary personal data to the authorized processor Maksekeskus AS for the execution of payments.