Back to shop

Privacy policy

Sunnyday OÜ is committed to protecting the privacy of its customers and users. Accordingly, we are responsible for the collection, use, disclosure, transfer and storage of customer data. Our activities on the Internet are in compliance with all relevant activities and relevant European Union legislation and the laws of the Republic of Estonia.

Data processed

• name, telephone number and e-mail address
• delivery address
• bank account number
• Cost of goods and services Payment details (purchase history).

Collection of personal data

The customer’s personal data, namely name, personal identification number, postal address, telephone number, e-mail address, postal code, bank account, are collected when the purchase or order is made from the e-shop. The collected data is used for the management of customer orders, delivery of goods and analysis of customer preferences.

Collection of other data

Non-personally identifiable data that cannot be directly linked to a specific individual: gender, age, language preference, location are collected and used to provide web usage statistics in order to provide more useful and personalised information to the customer.

Data security and access

The processing of personal data is carried out for the purposes of the performance of the contract with the customer. The customer’s personal data will be stored in accordance with legal requirements. By agreeing to the terms of the Privacy Policy, the customer gives Sunnyday OÜ consent to the automated processing of his/her data.

Kliendil on õigus nõusolek tagasi võtta teavitades sellest kliendituge e-posti (info@sunnyday.ee) teel.

The customer has the right to withdraw consent by informing customer support by e-mail (info@sunnyday.ee).

Personal data is stored on servers of Kamatera Inc. located in the territory of a Member State of the European Union or in the territory of a country that is a member of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States that have signed up to the Privacy Shield framework.

Access to customer personal data is provided to the staff of the online shop, who can access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support services.

The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

Transfers of personal data to the online shop’s processors (e.g. transport service providers and data aggregators) are subject to agreements between the online shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data.

Sunnyday OÜ is the controller of personal data and transfers the personal data necessary for the execution of payments to the processor Maksekeskus AS.

Data storage

• When making a purchase from the online shop, the purchase history is stored for three years;
• In the case of disputes related to payments and consumer disputes, the personal data is stored until the claim is settled at the end of the limitation period;
• Personal data necessary for accounting purposes are kept for seven years.