Interstudio Privacy Notice
1. Introduction
This is an overview of how your personal data is processed when you use the website https://interstudio.ee/ or make a purchase on the website in Interstudio online store.
The controller of your personal data is OÜ INTERSTUDIO (“Interstudio”), registry code 11106859, address Pärnu mnt 158, Tallinn 11317, Estonia.
2. How do we process your personal data?
When making a purchase in the online store, Interstudio will ask for your personal data to fulfill the order, including making a payment and delivering the products. We also store customer support data for the purpose of managing customer orders and providing customer support. The personal data we collect is stored by Interstudio depending on the service and processed within the framework of the service provided.
In addition, Interstudio also processes website visitor data for web statistical purposes, regardless of whether the visitor purchases products from the online store. Read more about this in Interstudio’s Terms of Use of Web Cookies.
The basis for the processing of personal data is the performance of a contractual order or the provision of a service to the customer, the legitimate interest of Interstudio and the consent given by the user if the law provides for the obligation to ask for consent (in particular, marketing communications).
The purposes of the processing of personal data are the execution of a contractual order or the provision of a service and the provision of its quality and ease of use, statistics, marketing, user support, compliance with security requirements, operation of the service between service providers.
3. What personal data do we process and why?
| Activity | Personal data | Purpose | Basis for processing |
| Order processing | Name, company name, registry code and address; | Order processing | Contract |
| phone number, e-mail address, delivery address, bank account number, payment card details | |||
| Payment information and billing | Customer identification data, billing data | Order processing | Contract |
| Resolving direct inquiries | E-mail address, content of the inquiry | Customer service | Contract |
| Technical functioning of the website | Browser information, technical cookies, error messages | Website operation and development | Legitimate interest |
| Web visitor behaviour | Web browser information, IP address, usage statistics | Optimizing the ease of use of the website visitor | Legitimate interest |
| Newsletters and marketing offers | Name, email address, phone number | Marketing | Consent |
4. Transfer of personal data
Our employees have access to your personal data to the extent necessary for the performance of their duties.
We use the services of third parties to provide our services at the highest possible level. These service providers have access to some of your personal data to ensure the appropriate service. These service providers do not have the right to use your personal data for other purposes or to store it longer than necessary to provide the service appropriately.
With whom and for what purpose do we share personal data?
| Categories of receivers | Purpose of the transfer |
| Service providers | We cooperate with service providers who provide services necessary for the operation of the online store and the execution of orders (for example, accounting services and transport and courier companies). Our cooperation partners are also providers of technical solutions necessary for the operation of the website and their security. |
| Payment service provider | If you make a purchase in the Interstudio online store, the processor of the personal data necessary for the execution of your payment is Maksekeskus AS (registry code 12268475), which, as an independent data controller, is guided by the legal requirements applicable to the provision of payment services when processing data or the instructions of the controller as an authorized processor. |
| Marketing partners | We work with marketing partners who help us select relevant ads and marketing channels. |
International transfers
Part of our data processing, where we are data controllers, takes place using cloud solutions. This means that some data may, in certain cases, also move outside the European Union. In such cases, we ensure that the transfer of data complies with applicable data protection rules and laws, and that contractual, technical and organizational measures are in place.
5. Ensuring the security of personal data
To ensure the security of all data, we implement technical and organizational security measures. We ensure the protection of your personal data in relation to intentional or unintentional destruction, alteration, undue access or any other unlawful processing.
Security measures include, but are not limited to: authentication and access management; passwords and needs-based access to data; secure network design; encryption; prevention of data loss and other security measures that are constantly updated.
6. Retention and deletion of personal data
The retention periods of personal data depend on the purpose and legal basis for which we process it. For example, we may be subject to a legal or contractual obligation to retain data for a certain period of time. It may also be based on your and our legitimate interest or your consent. In the following, we will give an overview of these deadlines.
| Data | Purpose of processing | Storage period |
| Name, company name, registry code and address; | Order processing | As long as the information is necessary for the execution of the order and the resolution of disputes arising on the basis of orders + on the basis of a legitimate interest until the purpose is fulfilled or the person’s request for deletion |
| phone number, e-mail address, delivery address, bank account number, payment card details | ||
| Payment information and billing information | Order processing | 7 years from the end of the financial year |
| E-mail address, content of the request | Customer service | Until the purpose of the exchange of information has been achieved |
| Browser information, technical cookies, error messages | Website operation and development | Until the end of the online session or the resolution of the error messagei |
| Web browser information, IP address, analytical cookies | Optimizing the ease of use of the website visitor | 2 years or until the user deletes the cookie earlier |
| Name, email address, phone number required for marketing | Marketing | Withdrawal of consent |
7. Rights of the person
According to the data protection regulation, you have certain rights in relation to the processing of personal data. Please note that in order to exercise these rights, you must contact the data controller.
- 1) Right of access. You have the right to know who, how, from what sources and what personal data is processed.
- 2) Data transfer. You have the right to request the personal data collected about you in a machine-readable format for transfer to another service provider whose services you wish to use, for example, in the future.
- 3) Deletion of data/right to be forgotten. You have the right to request the deletion of your personal data if you no longer want it to be processed and the controller has no legitimate reason to use it.
- 4) Restriction/objection to data processing. You have the right to restrict and prohibit the processing of your personal data under certain conditions. You also have the right to object, if there is a good reason, to the use of your data for processing on the basis of a legitimate interest.
- 5) Correction of data. You always have the right to rectify or complete personal data if it is not accurate and if the inaccuracy may have an impact on you.
- 6) The right to withdraw consent. If you have given consent to the processing of your personal data, you always have the right to withdraw it.
To exercise the above rights related to the processing of personal data, please contact us info@interstudio.ee.
We will answer you within 30 days. If your inquiry concerns personal data for which we are not data controllers, we will transfer your request to the data controller.
8. Other important information
Newsletters and direct marketing
We will send you newsletters and selected marketing offers if you have given us your consent. You have the option to withdraw your consent at any time. The unsubscribe link is included in the notice. We may also use social media tools to promote our products and services. As social media platforms and web analytics providers are treated as separate controllers, their privacy policy also applies to the processing of your personal data in this regard. Consequently, attention must also be paid to the terms and conditions of the consents of these service providers.
Settlement of disputes
If you have any questions about the processing of your personal data, please contact us info@interstudio.ee. You also have the right to file a complaint with the Data Protection Inspectorate info@aki.ee.
Privacy Notice last updated in June 2023
