Personal Data Protection Act § 10 compliant registration information. In connection with various services, customers' personal data is collected into a customer register. From the registry information, you can learn what data is collected and how it is used.

Personal Data Protection Act (523/1999), sections 10 and 24.
Date of preparation: December 29, 2016
C&C EE OÜ uses Data in the manner and solely for the purpose for which C&C collected the Data and only to the extent necessary for fulfilling this purpose. C&C EE OÜ adheres to the Personal Data Protection Act and other laws (hereinafter: Legislation) and good business practices in its use of Data.

1. Data Controller

C&C EE OÜ
Tartu mnt 80
10112 Tallinn

2. Responsible person for the registry

According to Article 37(1) of the European Parliament and Council regulation, our company is not required to appoint a data protection officer.
http://eur-lex.europa.eu/legal-content/ET/TXT/HTML/?uri=CELEX:32016R0679&from=ET

3. Name of the registry

C&C EE OÜ client data register. The register consists of multiple sub-registers.

4. Purpose of personal data processing

Personal data is handled with the consent of the individual registered or upon order or based on the client relationship. Data is used to maintain client relations, communicate with clients, and for marketing purposes. C&C may use the register data for direct marketing if the client has given permission. Personal data is not shared with other parties.

The purpose of the register is as follows:

• to maintain and manage client and other business relationships between the data controller and the data subject;

• to process feedback submitted to the data controller;

• to develop and manage the services and products of C&C EE OÜ;

• to manage the internal and external obligations of the company C&C EE OÜ, its affiliates, subsidiaries, and subcontractors concerning direct marketing, data mining, and profiling of client data.

Contents of the register

The register may store the following data:

• information provided by the data subject, such as name, email address, phone number, etc.;

• cookie data of the data subject related to the use of C&C EE OÜ websites;

• log data related to the use of C&C EE OÜ websites, identifying date and time and user preferences;

• client financial data related to the purchase of services and products;

• customer inquiries and feedback;

• client ID.

5. Sources of data

The register consists of data obtained from multiple sources when a client relationship is established either in the online store or C&C showrooms. A client relationship is established when a client creates a user account in the online store or orders goods.

6. Accuracy, up-to-dateness, and completeness of data

The accuracy of consumer data is not verified from the population register. Contact and credit information of C&C EE OÜ billing clients is verified from the web databases of the Centre of Registers and Information Systems (https://ariregister.rik.ee).

7. Data contained in the register

The C&C online store client register contains the following data: Client data: First name Last name Company registration code Address Postal code City/Village/Settlement Phone Email address Web service username and password In case of credit purchase: Credit terms Information necessary for credit follow-up Usage data: Orders, deliveries, and returns Direct marketing data: Direct marketing permission Newsletter subscription

8. Data transfer

C&C EE OÜ does not transfer data to third parties, except to authorities as permitted and required within the limits of applicable law. Data may be sent outside the EU or European Economic Area within the limits permitted by the Data Protection Act.

9. Protection of the register

The database is kept in locked premises inaccessible to unauthorized persons. The system is protected by a firewall and against external connections outside of user rights verification. Regular backups are made from the register in case of disruptions. The register is handled solely by C&C EE OÜ employees with a personal username and password, who need to handle personal data within the framework of the client relationship. Persons using the register have a confidentiality obligation.

10. Customer's right to inspect the register

The client has the right to inspect personal data related to them from the client register according to section 19 of the Personal Data Protection Act. The inspection request must be sent to the registrar in writing and signed.

11. Cookies

The C&C online store uses cookies to enhance website quality and make it even more user-friendly. If desired, cookies can be disabled in the browser settings – in such a case, the website will not fully function as intended. Cookies collect the following data: IP address, browser type, operating system, arrival and exit pages, network service provider, date and time data, and pages opened within the website. Data is used for cart and order operations. For data analysis, we use the Google Analytics service. Google Analytics data cannot be used to derive the identity or data of an individual client.