This privacy policy describes how Rickman Trade OÜ, registry code 11258931 (“Rickman”, “we”, “us” or “our”) processes your personal data as a data controller when you visit the website litter-robot.ee, order products or use our services on the website or contact us. Please note that this privacy policy does not apply to the products or services offered on other Rickman websites. As our personal data processing practices may vary across different websites, you should always refer to the privacy policy specific to the website you are using.
It is important to us that your personal data is protected when using our services. We process personal data in accordance with the data protection legislation applicable to our activities, including the EU General Data Protection Regulation 2016/679 (GDPR). All terms used in this Privacy Policy should be understood as defined in the GDPR.
What personal data do we process about you, for which purposes and for how long
(1) Natural person clients
When ordering goods from us, we will process the personal data about you that you have provided to us yourself.
The personal data we process includes your name, delivery address, e-mail address, phone number, payment data, order data, WhiskerCareTM Warranty data.
We will process this data for the following purposes:
- to deliver the goods to you;
- to contact you to confirm your purchase, update you about the delivery of your goods or to send you any other important information about your order;
- to process returns;
- to process warranty claims;
- to manage the contractual relationship.
The legal basis for such processing of personal data is the need to prepare and perform a contract (GDPR Art 6(1)(b)) and our legitimate interest in management of the contractual relationship (GDPR Art 6(1)(f)). We may also use the personal data to comply with our legal obligations relating to accounting and taxation (GDPR Art 6(1)(c)).
We retain your personal data for three years after you have received the goods or after your warranty has ended.
(2) Warranty claims
If you have not bought the goods from us but from our trusted distributor, we process the personal data you have provided to us yourself when submitting the warranty claim.
We process personal data like your name, e-mail address, order data and WhiskerCareTM Warranty data to process your warranty claim.
The legal basis for such processing of personal data is the need to perform a contract that you have concluded with our distributor (GDPR Art 6(1)(b)).
We retain your personal data for three years after the conclusion of your warranty claim.
(3) Representatives and contact persons of legal person clients, distributors, service providers and partners
When you represent a company related to you in your dealings with us, we will process personal data about you that you have provided to us yourself or that has been provided to us by the company related to you.
We will process your personal data, such as your name, professional contact details, job title and when needed data about right of representation, for the purposes of performing and managing the contractual relationship with your associated company and for the purposes of cooperating with (including contacting) that company.
The legal basis for the processing of personal data is the need to perform or manage a contract with the company or otherwise cooperate with the company (GDPR Art 6(1)(f)).
We will retain the personal data of representatives or contact persons for as long as it is necessary to manage the relationship with the company.
(4) Newsletters
To send you newsletters and notices we use the personal data you have provided to us when subscribing to our newsletters.
We process personal data such as your name and e-mail address to send you exciting information about our goods and services.
The legal basis for the processing of personal data is your consent (GDPR Art 6(1)(a)), subject to the restrictions applicable to direct marketing by electronic means. You can always withdraw your consent for receiving news and communications from us in accordance with the instructions at the end of each email.
We retain your personal data for the purpose of sending you newsletters until you have withdrawn your consent.
(5) When you contact us
When you contact us, the personal data we collect includes your name, e-mail address, the content of your message and your voice if you contact us by phone. All incoming phone calls are recorded.
We use this personal data to identify you, contact you and respond to your inquiry. The legal basis for such processing is our legitimate interest in responding to your inquiry (GDPR Art 6(1)(f)).
We may use call recordings to monitor, ensure and develop the quality of the service and to prepare, perform and enforce a contract. The legal basis for the processing of call recordings is the need to perform a contract (GDPR Art 6(1)(b)) or our legitimate interest (GDPR Art 6(1)(f)).
We will retain your personal data for as long as it is necessary for the purposes of managing and responding to inquiries or taking the necessary action in response to an inquiry.
We retain call recordings for 60 days after which they are automatically deleted. We may retain the recordings for longer, if they are relevant to the establishment, exercise or defence of claims.
(6) Cookies
We use a variety of cookies on our website, through which we may also collect personal data. Depending on the purpose for which the personal data is collected, the processing is based on our legitimate interest in ensuring the functioning of the website (GDPR Art 6(1)(f)) or your consent (GDPR Art 6(1)(a)).
You can find more information about the different cookies we use from the cookie banner displayed when you enter the website or from the cookie notice.
(7) Protection of our rights or fulfilment of our legal obligations
In addition to the purposes described above, we may need to process personal data in order to protect our rights (e.g. in legal disputes), to comply with legal obligations or to process a request you have made to us as a data subject to exercise your rights in relation to your personal data.
The legal basis for processing your data when protecting our rights is our legitimate interest to defend our rights (GDPR Art 6(1)(f)). We are obligated by the GDPR to act on a request from the data subject and therefore we process personal data for this purpose in order to comply with a legal obligation (GDPR Art 6(1)(c)).
In addition to the fact that we retain personal data for the primary purpose for which they were collected and processed, we sometimes need to retain personal data beyond the fulfilment of that purpose in order to safeguard our rights (for 3 years in the case of a contractual relationship and for 10 years in the case of a non-contractual relationship, based on the normal limitation period for claims) or to comply with legal obligations (for accounting and tax obligations, we retain data relating to payments for 7 years).
Who do we share your data with?
To provide the best possible service to you, we use the help of some carefully selected service providers who have access to personal data to the extent necessary to perform their services. Examples of such processors are service providers who provide us with delivery services, IT services and service providers through whom payments are made. These service providers will only process personal data per our instructions as processors on our behalf and we remain fully responsible for your personal data processing.
We may sometimes transfer your personal information to third parties that act as data controllers, but only if we have a legal basis. For example, we may transfer personal data to supervisory or regulatory authorities, our accountants and legal advisers.
We do not transfer your personal data outside of the European Economic Area.
Your rights
If you have any questions about the processing of your personal data or if you wish to exercise your rights, please contact us by email at rickman@rickman.ee.
Please be aware that your rights in relation to your personal data are not absolute and we may not always be obliged or able to take the action you request.
- Right to access. At any time, you can ask us to confirm what personal data we process about you and request a copy of your personal data.
- Right to rectification. You may at any time ask us to correct and/or complete your personal data if it is inaccurate or incomplete.
- Right to erasure. In certain cases, you have the right to ask us to delete your personal data. For example, you have such a right if (i) the personal data is no longer necessary for the purposes for which it was processed; (ii) you withdraw your consent to the processing of personal data and we have no other legal basis for further processing; (iii) you object to the processing of your personal data and there are no overriding legitimate grounds for continuing to process the personal data or if you object to the processing of personal data for direct marketing purposes; (iv) the personal data has been processed unlawfully; (v) erasure is necessary to comply with an obligation under applicable law. However, we are not always obliged to delete personal data at your request. For example, we are not required to do so where the continued processing of personal data is necessary to comply with our legal obligations or to prepare, submit or defend legal claims.
- Right to restriction. In certain cases, you have the right to request the restriction of the processing of your personal data. You have this right if (i) you contest the accuracy of the personal data, for a period of time that allows us to verify the accuracy of the personal data; (ii) the processing of the personal data is unlawful and you are not requesting the erasure of the personal data but the restriction of use; (iii) we no longer need the personal data concerned for the purposes of the processing, but it is necessary for you for the establishment or exercise of legal claims or for the defence of your claims; (iv) you have objected to the processing of the personal data, for a period of time pending verification whether our legitimate grounds for processing the personal data override the grounds you have given us for stopping the processing. Where the processing of personal data is restricted, we may nevertheless process the personal data if (i) you have given your consent; (ii) the data are necessary for us to prepare, submit or defend legal claims; (iii) the data are necessary for us to protect the rights of a natural or legal person; or (iv) the processing is necessary for an important public interest.
- Right to object. Where processing of personal data is based on our or a third party’s legitimate interest, you have the right to object to such processing. In such cases, we will not further process the personal data unless we can demonstrate that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment or exercise of legal claims or the defense of legal claims. If you object to the processing of personal data in connection with direct marketing, we will no longer process your personal data for that purpose.
- Right to withdraw consent. Where we process personal data on the basis of your consent, you have the right to withdraw your consent at any time. Please note that withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent prior to the withdrawal.
- Right to data portability. You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit that data to another controller where the processing is based on your consent or for the purposes of the performance of a contract and the data is processed by automated means. Where technically feasible, you have the right to request that we transfer the data directly to another controller.
- Right to lodge a complaint with a supervisory authority. If you consider that your personal data have not been processed in accordance with the applicable data protection law and that your rights have been infringed, you have the right to lodge a complaint with the Data Protection Inspectorate (address: Tatari 39, 10134 Tallinn; phone: +372 627 4135; e-mail: info@aki.ee) or with the supervisory authority in the Member State where you have your habitual residence, place of work or the place where the alleged infringement took place (see https://edpb.europa.eu/about-edpb/board/members_en).
We will respond to your request within one month, unless there are circumstances that require us to take longer to act. In any case, we will inform you within one month.
Changes to this Privacy Policy
If our practice regarding the processing of personal data changes or if we need to amend the Privacy Policy as a result of applicable data protection legislation, other legislation, case law or the guidelines or practice of supervisory authorities, we have the right to unilaterally amend the Privacy Policy at any time. We will notify you of these changes on our website.
