1.1. For Baumarket OÜ (hereinafter - "Airmarket.ee" or "we" or "the online store"), the satisfaction of our private customers, business partners and partners is of the utmost importance, which is why we are committed to always maintaining and respecting the privacy of those whose personal data (hereinafter - "data") is processed. 
1.2. The Company will make every effort to ensure that our processing of personal data complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
1.3. The data controller of the personal data of the consumer (hereinafter referred to as the "Customer" or "You") is Baumarket OÜ, legal entity registration code: 14989581, 10143 Tallinn, phone +372 6 229 100 and e-mail: info@airmarket.ee.
1.4. The Data Protection Conditions apply if:
1.4.1. you have registered as a loyal customer (natural/legal persons) by creating a corresponding user account on the website of the online shop or by filling in a membership application at the representative office;
1.4.2. you make purchases from the e-shop as a member of the loyalty program or make individual purchases as a regular customer;
1.4.3. you order our services via an online shop website or on-site at a branch office;
1.4.4. you subscribe to our newsletter or have expressed a wish to receive our offers by ordinary mail, e-mail or SMS;
1.4.5. you simply make a request for information via our online environment or by e-mail;
1.4.6. you interact with us in any other way than the above as a consumer, business customer, business partner, supplier or any other person having a business relationship with Baumarket OÜ.

2.1. Baumarket OÜ may collect your data if:
2.1.1. you visit or use the Airmarket.ee website, apps and/or social media channels;
2.1.2. you purchase and use Baumarket OÜ products and/or services;
2.1.3. subscribe to our newsletters;
2.1.4. offer your products and/or services to us;
2.1.5. when you contact our customer support;
2.1.6. you participate in promotions, surveys or otherwise interact with us.
2.1.6.1. Depending on the type of communication and the reason for it, the data collected will also vary, as the purposes for which the data is used will differ.
2.2. Data collected directly from you by Baumarket OÜ:
2.2.1. personal identification data (first name and surname, personal identification code/date of birth) - if you join a loyalty program or make purchases/subscriptions in the e-shop as a regular customer (excluding personal identification code/date of birth);
2.2.2. contact details (e-mail address, telephone number, delivery address, home address) - if you join the loyalty program or make purchases/subscriptions in the e-shop as a regular customer (excluding postcode of residence);
2.3. Data that Baumarket OÜ automatically collects from you:
2.3.1. when you interact with us through electronic channels, such as by shopping online or visiting our websites, apps and/or subscribing to our newsletter, we may collect information through your computer, mobile phone or other device you use, in addition to the information we receive directly from you. For example, we may store your username when you log in to the online store so that it is automatically displayed on your next visit, we may identify your IP address and location to show you offers in the store in that area that are relevant to you, etc.

3.1. The processing of personal data is carried out for the purpose of the performance of the contract concluded with the client. The processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting and settlement of consumer disputes).
3.2. Personal data is used for the management of customer orders and the delivery of goods.
3.3. Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased and to analyze customer preferences.
3.4. The bank account number is used to refund payments to the customer.
3.5. Personal data such as e-mail address, telephone number, and customer's name, are processed in order to resolve issues related to the provision of goods and services (customer support).
3.6. The IP address or other network identifiers of the user of the e-shop are processed for the purpose of providing the e-shop as an information society service and for the purpose of web usage statistics.

4.1. Baumarket OÜ keeps the personal data of the customer, which has become known to it in the course of registration and use of the user account, confidential and discloses them to.
to third parties only with the consent of the customer, unless the obligation or right to disclose the data arises from legislation.
4.2. The user of the e-shop agrees that Baumarket OÜ has the right to process his/her data in order to provide the customer with the appropriate services, including the right to transfer the customer's data to persons involved in the provision of services to the customer by the merchant. We may share your personal data with the following categories of data subjects:
4.2.1. We may transfer your personal data to our insurers and professional advisers for the purposes of risk management, professional advice and the making, performance or defence of legal claims;
4.2.2. Financial transactions relating to purchases made through our website may be processed by our payment service providers. We will only share your transaction details with our payment service providers to the extent necessary to manage your payments, refunds and complaints;
4.2.3. We may transfer your personal data to other service providers for the provision of specific services. These include, for example, web hosting service providers, courier service providers, server and server maintenance service providers, email service providers, newsletter service providers, survey service providers, data protection officer service providers.
4.3. We will only use service providers who have implemented/ undertake to implement appropriate technical and organisational measures to ensure an adequate level of security for the processing of data that is appropriate to the risk of breaching the rights or freedoms of natural persons whose data are processed under a data processing contract and that complies with the requirements of the General Data Protection Regulation.
4.4. In addition to the cases mentioned above, we may also transfer your personal data to third parties where this is necessary for the performance of our legal obligations or to protect your interests or the interests of others. With your consent and for the purposes of direct marketing, we may transfer personal data to our partners who provide marketing services to us.
4.5. The recipients of the data referred to in this section may also be located outside the Republic of Estonia, the European Union or the European Economic Area. We will transfer your personal data to such third parties who comply with the requirements of the General Data Protection Regulation.
4.6. List of processors:
4.6.1. Magento – used for the provision of e-commerce services;
4.6.2. EveryPay AS – used to accept payments;
4.6.3. Mailchimp – to deliver customised direct marketing offers to the Customer;
4.6.4. Google Analytics – collected to gather statistics and analyse web traffic in order to improve the user experience and technical solution of the e-shop;
4.6.5. Akaneo PIM – to import categories (category tree), product information, stock levels, prices and images. Order information is exported;
4.6.6. Zopim – the visitor's personal data is transferred to the e-shop's customer support for the management of purchases and purchase history and for solving customer problems;
4.6.7. Hotjar – collects data to analyse and modify daily web usage.

5.1. In all cases, your personal data will not be kept for longer than is necessary for a specific purpose. Data will be stored for as long as we are required to do so by law or as necessary to fulfil the purposes for which the data is processed. Below are some examples of data retention periods:
5.1.2. In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or until the expiry of the limitation period (three years).
5.1.3. Personal data necessary for accounting purposes shall be kept for seven years.
5.2. You can obtain more information about the retention period of your personal data by sending us a request by letter or telephone.

6.1. Personal data stored in the e-shop can be deleted together with the user account in the e-shop user account management.
6.1.1. Personal data will be deleted upon closure of the e-shop customer account, unless such data need to be stored for accounting purposes or to resolve consumer disputes.
6.2. Other deletions of personal data can be requested via the data request form. The request for deletion of data will be replied to within one month at the latest and, if necessary, the period of deletion will be specified.

7.1. You can download an electronic extract of your personal data stored in the e-shop by sending a request to info@airmarket.ee.
7.2. You can also make a request for the transfer of other personal data by writing to Customer Services at info@airmarket.ee. The request for data transfer will be answered no later than within one month, at which time Customer Support will verify the identity and inform you of the personal data to be transferred. 

8.1. Personal data shall be stored in a server centre with an access system certified by the Federal Bureau of Investigation, whose servers and information systems are located in the territory of the European Union. Both TIER 3 and ISKE standards, including ISO 27001:2013 for information security and availability, have been applied to the server centre.
8.2. The e-shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.
8.3. Transfer of personal data to the e-shop's processors - The processing of personal data is carried out on the basis of contracts concluded between the e-shop and the processors. Processors are required to ensure appropriate safeguards for the processing of personal data.

9.1. In this section of the Privacy Policy, we will give you an overview of your rights under data protection law. As some of these rights are complex, we only describe the main aspects in this Privacy Policy. For a complete overview of your rights, we encourage you to consult the relevant legislation and the guidelines of the supervisory authorities.
9.2. In relation to the protection of personal data, you have the following rights:
9.2.1. to be informed about the processing of personal data;
9.2.2. to have access to your personal data that we hold about you;
9.2.3. the right to request the rectification of personal data we hold about you (you can usually do this yourself in your account);
9.2.4. the right to ask us to erase the personal data we hold about you ("right to be forgotten");
9.2.5. the right to restrict the processing of your personal data;
9.2.6. the right to object to the processing of your data;
9.2.7. not to consent to the processing of your personal data for direct marketing purposes;
9.2.8. the right to data portability;
9.2.9. the right to withdraw consent to the processing of your personal data;
9.2.10. the right to lodge a complaint with a supervisory authority.
9.3. If you wish to exercise your rights, if you have any questions regarding the processing of your personal data or the exercise of your rights, please contact us at info@airmarket.ee.
9.4. The right to be informed about the processing of personal data. Information about the processing of your personal data will be provided at the time of collection. You can always find this in this Privacy Policy or by contacting info@airmarket.ee.
9.5. Right of access to your personal data that we process. You have the right to obtain our confirmation as to whether or not we are processing your personal data. If we process your personal data, you have the right to access the personal data we process and information about the processing, such as the purposes of the processing, the categories of personal data, the recipients of the personal data, etc.. We will provide you with a copy of your personal data. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format. This right cannot be exercised where it may adversely affect the rights and freedoms of others.
9.6. We have the right to refuse to provide you with the personal data we are processing where we have identified circumstances under the law where the personal data will not be provided.
9.7.Right to request the rectification of your personal data held by us. You have the right to request the correction of your personal data if it contains errors and, having regard to the purposes for which the data is processed, to request the completion of your incomplete personal data.
9.8. Right to request the deletion of your personal data. This right applies, for example, if:
9.8.1. the personal data in question are no longer necessary for the purposes for which they were collected or processed;
9.8.2. you withdraw your consent and there is no other legal basis for processing the data;
9.8.3. you do not consent to the processing of the personal data for our or a third party's legitimate interests;
9.8.4. personal data is processed for direct marketing purposes;
9.8.5. the personal data has been unlawfully processed;
9.8.6. the personal data must be erased in accordance with the requirements of the legislation applicable to us.
9.9. We would like to draw your attention to the fact that there are, however, occasions when you will not be able to exercise this right. Such exceptions include cases where the processing of your data is necessary, for example:
9.9.1. to exercise the right to freedom of expression and information;
9.9.2. to comply with our legal obligations; 
9.9.3. for the establishment, exercise or defence of legal claims.
9.10. The right to restrict the processing of your data. This right applies for example if:
9.10.1. you contest the accuracy of your personal data;
9.10.2. the processing of your data is unlawful but you do not consent to its erasure;
9.10.3. we no longer need your personal data to fulfil the purposes for which they are processed, but you need them for the establishment, exercise or defence of legal claims;
9.10.4. you do not consent to it being processed for our or a third party's purposes, pending verification of this objection.
9.11. During the period of restriction of processing on these grounds, we have the right to continue to store your personal data, but we will not continue to process it unless:
9.11.1. with your consent;
9.11.2. for the establishment, exercise or defence of legal claims;
9.11.3. teise füüsilise või juriidilise isiku õiguste kaitsmiseks;
9.11.4. for the purpose of protecting the rights of another natural or legal person;
9.11.4. where justified by an important public interest.
9.12. The right to object to the processing of your data. You may exercise this right for any purpose and for any reason relating to the particular situation, but only to the extent that we use the data to protect our legitimate interests or those of a third party. If you do so, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims and/or our legitimate interests.
9.13. Right to object to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes).
9.14. Right to data portability. You can exercise this right in those cases where we process your personal data by authorised means (computer, etc.) and there is a legal basis for the processing:
9.14.1. your consent; or
9.14.2. the performance of a contract or the carrying out of a pre-contractual activity that you have requested.
9.15. The right to withdraw consent to the processing of your personal data. Where your consent provides a lawful basis for our processing of your personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of data that took place prior to the withdrawal.
9.16. Right to lodge a complaint with a supervisory authority If you consider that our processing of your personal data infringes the legislation on the protection of personal data, you have the legal right to lodge a complaint with the National Data Protection Inspectorate at Tatari 39, Tallinn 10134, http://www.aki.ee/. In all cases, please contact us before filing a complaint so that we can find an appropriate solution together.

Mon-Fri 9.00 AM - 6.00 PM
Telephone: +372 6 229 100
E-mail: info@airmarket.ee