Privacy Policy
PAGWeb OÜ PRIVACY POLICY
Effective from 20.06.2025
1. General Provisions
The online store PAGWOOD.EE (hereinafter Online Store) data controller is PAGWeb OÜ (registry code 16800837), located at Mäealuse 9, 12618 Tallinn, Harjumaa.
By using the Online Store and making purchases, the Online Store user (hereinafter Client) confirms their consent to the provisions set out in the Online Store's privacy policy.
The purpose of this privacy policy is to describe to the Client, whether a natural or legal person, how PAGWeb OÜ processes the Client's personal data. PAGWeb OÜ may update this document as necessary. The current version is always available in the Online Store.
2. Data We Process
Natural Person Client:
- Personal data enabling client identification, such as first and last name and personal identification code or date of birth;
- Contact details, including email address and phone number;
- Delivery information — address and chosen delivery method;
- Payment-related data, such as bank account number, payment details, and purchase history;
- Customer support data, including client inquiries, responses given, complaints, and communication history;
- Data about the use of the online store, including information about concluded contracts;
- Statistical data and information related to customer surveys or marketing offers;
- Other data voluntarily shared by the client, such as feedback or comments.
Legal Entity Client:
- Contact details of the legal entity's representative — first and last name, email address, and phone number;
- Official identification data of the company — company name, location, and registry code;
- Data related to the company's contact person — name, email, and phone number;
- Payment-related information — bank account number, payment details, and purchase history;
- Delivery-related data — delivery address and delivery method;
- Authorized persons' data — contact details and identification information;
- Customer support data — client questions, answers, complaints, and communication logs;
- Data related to the use of the online store — information about site usage and details of concluded contracts;
- Statistical and customer survey-related data — including survey results and information related to offers;
- Other data voluntarily shared by the client — for example, feedback and comments.
Client personal data is retained as long as the Client has not expressed a wish to stop processing or until their account is deleted. If required by law, for example for accounting or other legal obligations, data may be retained for a longer period.
3. Reasons for Collecting and Processing Data
PAGWeb OÜ processes personal data to provide its clients with reliable, smooth, and quality service. Processing data of natural person clients is primarily necessary for fulfilling the contract concluded with the client — including receiving, managing, and delivering orders. Certain data may also be necessary to fulfill legal obligations, such as accounting or resolving consumer disputes.
Data of representatives of legal entities is processed mainly based on legitimate interest to verify representation rights and enable appropriate business cooperation.
Data of natural person clients is used for the following purposes:
- Identification data is necessary for concluding and properly fulfilling purchase and sales contracts;
- Contact details are used to communicate with the client, provide order status and delivery information;
- Delivery data helps ensure timely and accurate delivery of ordered goods;
- Payment data is processed to carry out payments, manage refunds, and organize orders;
- Customer support data enables responding to inquiries, resolving issues, and handling complaints;
- Online store usage data is collected to ensure site stability and improve user experience;
- Analysis and feedback information is used to develop services and personalize offers;
- Additionally, the client may voluntarily share extra information (such as comments or feedback) that helps us improve our service further.
Data of legal entity clients is processed for the following purposes:
- Company data and contact information – necessary for managing client relationships, correctly processing orders, and fulfilling contracts;
- Payment data – used for organizing payments and, if necessary, making refunds related to orders;
- Delivery data – information for delivering orders according to agreement;
- Purchase history – for tracking previous purchases and offering personalized service;
- Authorized persons' data – information about persons authorized to act on behalf of the company;
- Customer support – data for managing inquiries and feedback to respond quickly and effectively;
- Online store usage data – collected to improve site functionality and optimize user experience;
- Analysis and feedback – used for preparing statistical reports and improving services;
- Voluntary information – additional information shared by the client, helping us better understand their needs and expectations.
4. Lawfulness of Data Processing
The basis for processing personal data is mainly the fulfillment of the contract between the client and the online store — meaning data is used to manage orders, deliver goods, and organize returns of goods and payments.
Personal data processing also occurs in accordance with legal obligations, such as fulfilling accounting and financial reporting requirements.
Additionally, data processing may be based on the company's legitimate interests, especially when it is necessary to resolve possible consumer disputes or analyze purchase history to improve quality.
5. To Whom Data Is Shared
Client names, contact phone numbers, and email addresses are only shared with those transport service providers whose services the client has selected when placing the order. For couriers, the delivery address is also added, which is necessary for correct and timely delivery of goods.
To ensure the reliability and functionality of the online store, personal data is also shared with IT service providers who manage web hosting and technical solutions.
6. Data Security and Access Restriction
Personal data is stored on secure servers located in European Union or European Economic Area countries. If necessary, data may also be transferred to countries where the European Commission has recognized an adequate level of data protection, and in certain cases to US companies that comply with Privacy Shield standards.
Access to personal data is strictly limited and allowed only to online store employees responsible for resolving technical issues and providing customer support.
The online store implements diverse security measures — both technical and organizational — to prevent loss, unauthorized access, or alteration of personal data.
Data sharing with authorized processors occurs under specific contractual agreements that ensure adequate protection and data accuracy. For example:
- Payment service providers receive data for processing payments;
- Courier and logistics companies are given necessary contact details for order delivery;
- IT service providers receive data for managing and developing web-based systems.
7. Client's Right to Access and Correct Their Data
Personal data can be accessed and corrected if necessary by contacting our customer support at the email address pagwood@icloud.com. Since our online store does not have a user profile creation option, personal data management and information retrieval occur through customer support.
Upon electronic request, the necessary information is also provided through publicly accessible electronic channels. Every individual has the right to access the data collected about them, request correction of incorrect data, request cessation of personal data processing, and receive information about data usage.
8. Changing or Withdrawing Given Consent
If the basis for processing personal data is the client's consent, the client has the right to withdraw their consent at any time by notifying customer support via email.
9. Retention
Personal data related to payments or disputes is retained as long as the claim is fully fulfilled or until the limitation period expires.
Personal data contained in accounting-related documents is retained according to the law for up to seven years.
10. Account Closure and Personal Data Removal
If you wish to delete your personal data, please contact our customer support at pagwood@icloud.com. Your request will be reviewed within 30 days at the latest, and you will be informed about the deletion process schedule. Please note that some data required for fulfilling legal obligations (such as accounting records) is not subject to deletion.
For clients who are legal entities, accounts cannot be removed until all debts to PAGWeb OÜ are fully paid. This procedure is necessary to ensure the fulfillment of contractual and financial obligations. The account can be finally closed only after there are no outstanding invoices or other obligations.
To protect personal data and prevent misuse, deletion requests are accepted only if the applicant's identity is unambiguously verified — for example, through a digitally signed application.
11. Marketing Notification Preferences
The client's email address and phone number may be used to send direct marketing messages only if the client has given explicit consent. If the client wishes to unsubscribe from these messages, they can click the corresponding link at the bottom of the email or contact our customer support at any time.
If personal data is used for direct marketing purposes, including creating client profiles, the client has the right to object to such processing of their data at any time. The objection must be sent to our customer support via email.
12. Dispute Resolution Procedure
All questions and possible disputes related to personal data processing are first resolved through our customer support at pagwood@icloud.com.
If the issue is not satisfactorily resolved, the Client has the right to contact the supervisory authority - Estonian Data Protection Inspectorate (email: info@aki.ee).