Last update: January 2020

Our website www.bymukk.com (SITE) and www.mukk.eu (SITE) are provided to you by Mukk Cosmetics OÜ, an Estonian company with registry code 14095335, (by mukk, us or we). The SITE provided by us is referred to as our SERVICE. If you choose to use our SERVICE, then you as a CLIENT/CUSTOMER/USER agree to the collection and use of information in relation to this policy.

We value our CUSTOMERS and respect their privacy. Any information we collected about the CUSTOMERS is held with security. This privacy policy describes the Personal Data that we gather about our CLIENTS in relation to the SERVICE, how we use and disclose such Personal Data, and the steps we take to protect it.

It is important to read carefully this Privacy Policy together with our Terms and Conditions. If you have any questions regarding our Privacy Policy and you wish to review, modify or delete your personal data, please direct your inquiry to info@bymukk.com.

Please note that this Privacy Policy does not extend to third-party websites and social plug-ins linked on this SITE and we cannot guarantee that these third parties will handle your personal data in a secure manner. Be aware that information may be directly transferred from your device to the operator of the applicable social network.

Further, our SITE uses cookies and similar technologies to provide functionality and to recognize you across different services and devices. You can set your browser to (partly) disable or refuse cookies. For more information about cookies, please make sure to read the Terms of Use, which include information about our Cookie Policy.

What personal data are processed?

-name, phone number, and email address;
-delivery and billing address (street name and number, postal code, city, region, and country);
-payment details and bank account number
-cost of goods and services and data related to payments (purchase history);
-customer support data.

 Why personal data are processed?

We retain and use your personal data for the following purposes:
Responding to your questions by email or by phone
Personal data such as email, phone number and the CUSTOMER’S name are processed to handle any issues relating to the provision of goods and services (customer support)

Fulfilling and managing your orders and delivering goods
We will use your personal data when fulfilling and managing matters related to your order and for proper handling also share your information with third parties. The bank account number is used to reimburse payments to the CUSTOMER. We will also use your information to contact you with matters relating to your order.

Updating you about our policies
We will use your personal data in order to contact you with updates and changes on our Terms and Conditions, Terms of Use and Privacy Policy.

Informing you about the products, services, and promotions
We send out a newsletter to keep you updated about the offers and news that take place on our SITE. You will be added to the newsletter mailing list. Each newsletter contains a link through which it is possible to unsubscribe from our newsletter.

Data research and development
The IP address or other web identifiers of a USER of the SITE are processed for the provision of the SITE as an information society service and for web use statistics.
Purchase history details (date of purchase, goods, quantity, customer’s data) are used for preparing summaries of goods and services purchased and for analyzing customer preferences.

LEGAL GROUNDS

– Personal data are processed for the purpose of performing a contract concluded with the CUSTOMER.
– Personal data are processed for performing legal obligations (such as accounting and the settlement of consumer complaints).

RECIPIENTS OF PERSONAL DATA

Personal data are transmitted to the customer support of the SITE for managing purchases and purchase history and for settling any problems that the CUSTOMERS may have.
The name, phone number, and email address are transmitted to the transport service provider selected by the CUSTOMER. When the goods are delivered by a courier (Itella Estonia OÜ or DPD Eesti AS), the CUSTOMER’S address is also transmitted together with the contact details.
Our SITE is kept by a service provider and the personal data are transmitted to the service provider for performing accounting operations.
Personal data may be transmitted to IT service provider Edicy OÜ for ensuring the functionality of the SITE or for data hosting.

Mukk Cosmetics OÜ is the responsible personal data processor, Mukk Cosmetics transmits the necessary personal data for the execution of payments to the processor Maksekeskus AS.
In exceptional circumstances, such as in the event of suspicion of fraud or misuse of the site, we may hand over personal data to the appropriate authorities.

SECURITY AND ACCESS TO DATA

Personal data are stored in centralized databases, which are located in Estonia, on the territory of a member state of the European Union or states of the European Economic Area. Data may be transferred to the countries whose data protection levels have been assessed as adequate by the European Commission and to the companies in the USA who have joined the Privacy Shield framework.

Personal data can be accessed by the staff of the SITE in order to settle technical issues related to the use of the SITE and to provide customer support.

The SITE takes appropriate physical, organizational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.

Personal data are transmitted to the data processors of the SITE (such as the providers of transport and data hosting services) and processed under contracts concluded between the SITE and the processors. The processors must ensure appropriate safeguards when processing personal data.

We have security measures in place to reduce the likelihood of misuse, loss, and unwanted disclosure of, and unauthorized access to, personal data.

STORAGE

Online purchases are stored for three years in the purchase history.
In the event of disputes concerning payments and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period.
Personal data needed for accounting purposes are stored for seven years.

YOUR RIGHTS

Right to access and rectify your data
You have the right to receive information if we process your Personal Data and require your Personal Data to be corrected if it is incorrect. Personal data can be accessed through customer support.

Right to withdraw consent
Where personal data are processed on the basis of the CUSTOMER’S consent, the CUSTOMER has the right to withdraw his/her consent by notifying customer support by email.

Right to erasure your data
In certain cases, you have the right to have your Personal Data deleted. This applies for example if the processing is based on consent and consent is withdrawn. For the erasure of the personal data, customer support must be contacted via email. The requests of erasure are responded to no later than within one month and the period of erasure shall be specified.

Right to transfer of your data
Requests to transmit personal data submitted via email are responded to within one month. Customer support identifies the person and indicates what personal data are to be transmitted.

Right to object direct messages
Email addresses and phone numbers are used for sending direct marketing messages if the CUSTOMER has given the respective consent. If the CUSTOMER does not want to receive direct marketing messages, the CUSTOMER should select the relevant link at the footer of the email or contact customer service.

Right not to be subject to automated decision-making, including profiling
Where personal data are processed for direct marketing purposes (profiling), the CUSTOMER has the right to object at any time both to the initial and further processing of his/her personal data, including profiling related to direct marketing by notifying customer support thereof via email (the respective information must be submitted clearly and separately from any other information).

Right to submit complaints
Disputes concerning the processing of personal data are settled through customer support info@bymukk.com. We may need to request specific information from you to help us confirm your identity and ensure your right to access. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).

We have the right to modify and update this Privacy Policy from time to time.