This Privacy Policy explains how Regio OÜ (hereinafter referred to as “we” or “Regio”) collects, uses, protects, and shares your personal data.

The data controller for the information collected on the website www.regio.ee and the online store pood.regio.ee/pood is Regio OÜ. 
Registration Code: 12971967
Address: Väike-Tähe 20, Tartu, 51010 Tartu County, Estonia
Phone: +372 731 0122
Email: maps@regio.ee

Processing of personal data

Collected Personal Data

Regio OÜ collects and processes the following personal data entered by the visitor when you visit our website, online store (Shop), or use our services:

• name, phone number, and email address, address;
• delivery address;
• bank account number;
• details related to the cost of goods and services and payments (purchase history).

Payment information: via our payment service provider Montonio Finance OÜ or via bank transfer when paying by invoice.

Website visit data according to selected cookies: IP address, cookies, website usage, browsing history.

Purposes of Data Use and Processing

• Provision of services, order management, and delivery of goods.
  Maintaining communication, including customer service and sending notifications.
• Improving the website, online shop and services.
• The IP address and other network identifiers of the online store user are processed for the provision of the online store as an information society service and for compiling website usage statistics.
• Marketing activities (if you have given your consent).

Legal Bases for Processing Personal Data

The legal basis for collecting personal data depends on the specific context. Personal data is generally collected only:

• if there is consent (e.g., for marketing purposes);
• if the data is necessary for the performance of a contract (e.g., issuing an invoice and delivering goods);
• the data is required for compliance with a legal obligation (e.g., for accounting purposes or resolving consumer disputes);
• if there is a legitimate interest that does not override data protection interests or fundamental rights and freedoms (e.g., requesting feedback to improve our services).

Sharing of Personal Data

We share personal data with third parties in the following situations:

• Service providers: such as delivery service providers, financial and accounting service providers, marketing service providers, legal service providers.
• Banks and payment service providers: for processing financial transactions.
• Legal requirements: sharing with judicial or government authorities when required by law.

Security of Personal Data

Regio OÜ implements appropriate security measures to protect your personal data from unauthorized access, modification, destruction, or disclosure. Data processing is conducted in compliance with applicable laws and best practices for data protection.

Cookies

Regio’s website and online shop use cookies to enhance your browsing experience. By continuing to use our website, we assume you agree to our use of cookies. If cookies are not necessary for providing the service, we will ask for your consent.

Data Retention

We will retain your data only as long as necessary to achieve the purpose for which the data was collected or as required by law.

Upon closing a customer account in the online store, personal data will be deleted, unless such data needs to be retained for accounting purposes or for resolving consumer disputes.
If a purchase is made in the online store without creating a customer account, the purchase history will be retained for three years.
In the event of payment-related or consumer dispute-related claims, personal data will be retained until the claim is satisfied or until the expiry of the limitation period.
Personal data required for accounting purposes will be retained for seven years.

Your Rights

• The right to access your data.
• The right to correct, supplement, or delete your data.
• The right to restrict the processing of your data.
• The right to file a complaint with the Data Protection Authority.

Direct Marketing Communications

Your email address and phone number may be used for direct marketing communications if you have given us your consent. If you wish to opt-out of direct marketing communications, you can follow the unsubscribe link in the email footer or contact customer service at maps@regio.ee.

Regio processes your personal data within the European Union.

In certain cases, our contractual service providers may transfer or process your personal data in countries outside the European Union. In such cases, we ensure that the protection of your personal data is adequately safeguarded by establishing appropriate safeguards for data transfers outside the EU.

You may submit any personal data-related requests or inquiries via email to maps@regio.ee. Regio OÜ has the right to respond to requests within 30 days from the date of receipt of the signed request. If identification cannot be verified or the request is unreasonable, it may be denied.

You always have the right to contact the Data Protection Authority (www.aki.ee) or the court (www.kohus.ee) to protect your rights.