Privacy Policy
PROCESSING OF PERSONAL DATA
The data controller for the booking platform www.kabliku.eu is Käbliku_elamused OÜ (registration code 16419729), located at Käbliku Holiday Homes, Palutaja Village, 63506, Kanepi Parish, Põlva County, Estonia. Email address: info@kabliku.eu.
What personal data is processed
- name, phone number, and email address;
- bank account number;
- cost of goods and services and payment-related data (purchase history);
- customer support data.
For what purpose is personal data processed?
Personal data is used to manage the Customer’s orders.
Purchase history data (purchase date, item, quantity, customer details) is used to compile an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used to refund payments to the Customer.
Personal data such as email address, phone number, and the customer’s name are processed for the purpose of resolving issues related to the provision of goods and services (customer support).
Legal basis
Personal data is processed for the purpose of fulfilling the contract entered into with the Customer.
Personal data is processed to comply with a legal obligation (e.g., accounting and the resolution of consumer disputes).
Recipients to whom personal data is disclosed
Personal data is shared with the booking platform’s customer support team for the purpose of managing purchases and purchase history, and resolving customer issues.
If the accounting for the booking platform is handled by the service provider, personal data will be transferred to the service provider for the purpose of performing accounting operations.
Personal data may be disclosed to information technology service providers if necessary to ensure the functionality of the booking platform or data hosting.
Security and Data Access
Personal data is stored on the servers of Veebimajutus OÜ, which are located within the territory of a member state of the European Union or a country that has joined the European Economic Area.
Access to personal data is granted to employees of the booking platform, who may view such data in order to resolve technical issues related to the use of the booking platform and to provide customer support.
The booking platform implements appropriate physical, organizational, and technical security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.
The transfer of personal data to the booking platform’s authorized processors (e.g., transportation service providers and data hosting providers) is carried out in accordance with agreements concluded between the booking platform and the authorized processors. Authorized processors are required to ensure appropriate safeguards when processing personal data.
Accessing and Correcting Personal Data
You can access and correct your personal data through customer support
Withdrawal of consent
If the processing of personal data is based on the Customer’s consent, the Customer has the right to withdraw that consent by notifying customer support via email.
Storage
When a customer account in the booking system is closed, personal data is deleted, unless such data needs to be retained for accounting purposes or to resolve consumer disputes.
In the event of disputes related to payments or consumer disputes, personal data will be retained until the claim is resolved or the statute of limitations expires.
Personal data required for accounting purposes will be retained for seven years.
Deletion
To have your personal data deleted, please contact customer support via email. We will respond to your deletion request within one month and specify the timeframe for deleting the data.
Ülekandmine
Requests for the transfer of personal data submitted via email will be responded to within one month at the latest. Customer support will verify the identity of the requester and provide information regarding the personal data to be transferred.
Direct marketing messages
If personal data is processed for direct marketing purposes (profiling), the Customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support via email.
Dispute Resolution
Disputes related to the processing of personal data are resolved through customer support (info@kabliku.eu). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).