PRIVACY POLICY

General Terms

This privacy policy regulates the principles for the collection, processing and storage of personal data. Personal data is collected, processed and stored by the data controller, Nofi Kids OÜ, registry code 16151787, Ringtee 25, Tartu Estonia (hereinafter the data processor).
A data subject, as defined in this privacy policy, refers to a customer or any other natural person whose personal data is processed by the data processor.
A customer, as defined in this privacy policy, refers to anyone who purchases goods from the data processor’s website.
The data processor follows the data processing principles set out in the legal acts, including processing personal data lawfully, fairly and securely. The data processor can confirm that personal data is processed in accordance with the legal requirements.

Collection, Processing, and Storage of Personal Data
Personal data collected, processed and stored by the data processor is gathered electronically through the website.
By sharing their personal data, the data subject grants the data processor the right to collect, organize, use, and manage personal data for the purposes specified in this privacy policy, which the data subject shares directly or indirectly when purchasing goods or services on the website.
The data subject is responsible for ensuring that the data provided is accurate, correct and complete. Providing false information intentionally is considered a breach of the privacy policy.
The data processor is not responsible for any harm caused to the data subject or third parties due to the provision of incorrect data by the data subject.

Processing of Customer Personal Data
The data processor may process the following personal data of the data subject:
• First and last name
• Phone number
• Email address
• Delivery address
• Billing account number
• Payment card details

In addition to the above, the data processor has the right to collect data about the customer from public registries.
The legal basis for the processing of personal data is Article 6(1) a), b), c), and f) of the General Data Protection Regulation (GDPR):
a) The data subject has given consent to process their personal data for one or more specific purposes;
b) The processing of personal data is necessary for the performance of a contract with the data subject or for taking steps prior to entering into a contract at the request of the data subject;
c) The processing of personal data is necessary for compliance with a legal obligation of the data controller;
f) The processing of personal data is necessary for the purposes of legitimate interests pursued by the data controller or a third party, except where such interests are overridden by the data subject’s rights and freedoms, especially where the data subject is a child.

The data processor has the right to share customer personal data with third parties, such as authorized data processors, accountants, transportation and courier companies and payment service providers. The data processor is the responsible data controller.

Rights of the Data Subject
The data subject has the right to access their personal data and review it.
The data subject has the right to obtain information regarding the processing of their personal data.
The data subject has the right to rectify or correct inaccurate data.
If the data processor processes the data subject’s personal data based on the data subject’s consent, the data subject has the right to withdraw their consent at any time.
The data subject can exercise their rights by contacting the customer support of the online store at info@nofikids.ee.
The data subject has the right to lodge a complaint with the Data Protection Inspectorate for the protection of their rights.

Cookies
Nofi Kids OÜ uses cookies on its website www.nofikids.ee.
The cookies used:
Website cookies – cookies necessary for the proper functioning of the website and for fulfilling its basic purposes.
Google Analytics – cookies used for collecting statistical data regarding website visits.
Facebook Pixel – cookies used for targeted advertising through Facebook.
If you do not agree to the use of cookies, please block them by adjusting your browser settings so that cookies cannot be placed on your computer or mobile device.

Final Provisions
These data protection terms are created in accordance with the European Parliament and Council Regulation (EU) No 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data (General Data Protection Regulation), the Estonian Data Protection Act, and Estonian and European Union legal acts.
The data processor has the right to modify these data protection terms partially or entirely, notifying the data subjects of the changes via the website www.nofikids.com