Personal Data Processing
The responsible data controller for the booking platform www.kabliku.eu is Käbliku_elamused OÜ (registry code 16419729) located at Käbliku Holiday Houses, Palutaja village, 63506, Kanepi municipality, Põlva County, Estonia.Email address: info@kabliku.eu.
What personal data is processed
- name, phone number, and email address;
- bank account number;
- the cost of goods and services and related payment data (purchase history);
- customer support data.
For what purpose personal data is processed
Personal data is used for managing the Customer's orders.
Purchase history data (purchase date, goods, quantity, customer data) is used to compile an overview of purchased goods and services and to analyse customer preferences.
The bank account number is used to refund the Customer.
Personal data such as email address, phone number, Customer name is processed to resolve issues related to the provision of goods and services (customer support).
Legal basis
The processing of personal data takes place for the purpose of fulfilling the contract concluded with the Customer.
The processing of personal data takes place to fulfill a legal obligation (e.g. accounting and consumer dispute resolution).
Recipients to whom personal data is disclosed
Personal data is disclosed to the customer support for managing purchases and purchase history and resolving customer issues.
If the accounting of the booking platform is carried out by a service provider, personal data will be transferred to the service provider for accounting purposes.
Personal data may be transferred to providers of information technology services if necessary for ensuring the functionality or data hosting of the booking platform.
Security and access to data
Personal data is stored on the servers of Veebimajutus OÜ, located in the territory of a member state of the European Union or a country that is part of the European Economic Area.
Access to personal data is available to the employees of the booking platform who need to familiarise themselves with the personal data in order to resolve technical issues related to the use of the booking platform and provide customer support.
The booking platform implements appropriate physical, organisational, and information technology security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure.
Transfer of personal data to authorised processors of the booking platform (e.g. transport service provider and data hosting) takes place on the basis of contracts concluded between the booking platform and authorised processors. Authorised processors are required to implement appropriate protection measures when processing personal data.
Familiarisation with and correction of personal data
Personal data can be viewed and corrections made through customer support.
Withdrawal of consent
If the processing of personal data is based on the Customer's consent, the Customer has the right to withdraw consent by notifying customer support by email.
Retention
When the customer account of the booking platform is closed, personal data is deleted, except where such data needs to be retained for accounting or consumer dispute resolution purposes.
In the event of payment and consumer disputes, personal data is retained until the claim is fulfilled or the limitation period expires.
Personal data necessary for accounting purposes is retained for seven years.
Deletion
To delete personal data, please contact customer support by email. A deletion request will be responded to within no later than one month, specifying the data deletion period.
Transfer
Requests for the transfer of personal data submitted by email will be responded to no later than within one month. Customer support will verify the identity and provide information about the personal data to be transferred.
Direct marketing notices
If personal data is processed for direct marketing purposes (profiling), the Customer has the right to object to the initial and subsequent processing of their personal data, including profiling related to direct marketing, at any time by notifying customer support by email.
Dispute resolution
Disputes related to the processing of personal data are resolved through customer support (info@kabliku.eu). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).