Privacy policy

Forss OÜ personal data processing conditions

  1. Personal data defense and technical information

These terms and conditions apply to the Forss OÜ website ( forss.ee, forss24.ee), Forss OÜ and Tarfor OÜ stores and service points (car services). Forss OÜ and Tarfor OÜ (hereinafter referred to as Forss) collect and process only those personal data that are necessary to serve the customer in stores, service points and the internet ordering environment (www.forss.ee, forss24.ee) and to keep the loyalty program running.

Forss forwards direct marketing, campaign and discount offers to customers only if the customer has given their consent and it can be presented in a reproducible form. The customer has the right to withdraw said consent at any time.

Controller of personal data:

FORSS OÜ
Reg.nr: 10363212
Mooni 30 Tallinn 10615
Phone: 6651018
E-mail: info@forss.ee

Personal data is data that Forss collects to provide the service, to identify the person, to contact the person to provide the service or to solve questions. Forss does not process in Regulation (EU) 2016/679 of the European Parliament and of the Council (in English General Data Protection Regulation or GDPR or EU Regulation 2016/679) sensitive personal data defined in the regulation. Forss undertakes to protect the personal data of customers and users of forss.ee domains’ websites and their privacy. Forss activities on the Internet are in accordance with all relevant activities and the relevant legislation of the European Union and the laws of the Republic of Estonia, including Regulation (EU) 2016/679 of the European Parliament and of the Council. Forss takes all available precautions to protect the personal data it collects. Only authorized persons have access to change and process data, and database users have undergone the necessary training for using the databases

         2. Collected personal data

The types of personal data that Forss processes about the customer may depend on which channels the customer uses when communicating with Forss (sales office, forss.ee website), the purpose of the communication, and whether the customer uses the forss.ee website as a registered or unregistered user. Forss processes the following types of personal data:

  • General information: first name, last name.
  • Contact information: e-mail address and mobile phone number.
  • Order data: dates, contents of shopping carts, orders, invoices, list of products, prices and quantities.
  • Issuing the order at the selected Forss sales office: name of the selected office.
  • Payment data: payment amount, payment description, payer’s IBAN, payment card number, payment card type, payment card validity data;
  • Website data: data about the use of the website
  • Customer support data: customer inquiries, customer responses, customer complaints.
  1. Storage of collected personal data

Forss does not store customers’ personal data longer than it is reasonably necessary for Forss to achieve the purposes for which the data was collected or processed, in compliance with the following conditions for data storage:

  • The data in the user account registered in the online store will be stored until the user account is deleted. The account can be deleted both by Forss and by the user. In order to delete the account at the user’s initiative, the user must communicate the corresponding request to Forss . Data storage is necessary to ensure the functionality of the online store.
  • Data related to orders of unregistered users and other customers in the online store will be stored for three years from the end of the calendar year of the transaction. Retention of data is necessary to resolve possible disputes later.
  • Personal data related to personalized transactions are stored for up to 7 years due to the obligation to certify transactions in the Accounting Act.
  1. Transfer of collected personal data

Forss may transfer customers’ personal data to third parties, such as:

  • to third-party service providers (website administrator, courier service provider, legal aid service provider, IT system development and maintenance service provider, direct marketing message transmission service or marketing activity service provider;
  • to law enforcement bodies, state agencies and local government authorities, if they legitimately request it.

Forss makes every effort to ensure that third-party service providers ensure the confidentiality and security of transmitted personal data.

  1. A person’s rights regarding the data collected about him

A private person has the right to familiarize himself with the data collected about him, to demand the correction of incorrect data, to demand the termination of the processing of his personal data and to exercise other rights arising from the Personal Data Protection Act. To do this, you have to contact the sales office with the corresponding request, use the possibilities of the online environment to change your data, or notify your request by phone or e-mail.

If you wish to opt out of direct marketing offers for all or some topics, you can do so immediately via the link in the footer of every marketing letter sent. The change takes effect immediately.

If the client finds that his rights have been violated during the processing of personal data and he has not received a comprehensive answer or solution from Forss, he has the right to apply to the Data Protection Inspectorate or the court with a request to stop the violation.

Please send additional questions about the processing of personal data and other requests or statements related to the processing of personal data to the address info@forss.ee .

Valid from 01.09.2023

×