Personal data is processed by the Estonian Association of Tourism and Travel Agencies, reg. no. 80004199; Harju County, Tallinn, Pärnu mnt 20, 10141; phone +372 631 3013; email info@etfl.ee.
First and last name;
Phone number;
Email address;
Cost of goods and services.
Personal data is used to manage customer orders and to build Tourest exhibition stands in accordance with the submitted order.
Purchase history data (purchase date, item, quantity, customer information) is used to compile an overview of purchased goods and services and to analyze customer preferences.
Personal data such as email address, phone number, and customer name are processed to resolve issues related to the provision of ordered products/services (customer support). The IP address or other network identifiers of users of the order center are processed by the order center for the purpose of providing information society services and compiling web usage statistics.
Personal data is processed for the purpose of fulfilling the contract entered into with the customer. Personal data is processed to comply with a legal obligation (e.g., accounting and dispute resolution).
Personal data is shared with the order center’s customer support team to manage purchases and purchase history and to resolve customer issues.
Personal data is shared with order fulfillment providers when necessary to fulfill orders.
Personal data is transferred to the accountant engaged by the service provider.
Personal data may be transferred to information technology service providers if necessary to ensure the functionality of the order center or data hosting.
Personal data is stored on zone.ee servers located within the territory of a European Union member state or a country that is part of the European Economic Area. Data may be transferred to countries whose level of data protection has been deemed adequate by the European Commission, as well as to U.S. companies that have joined the Privacy Shield framework.
Access to personal data is granted to call center employees, who may review personal data in order to resolve technical issues related to the use of the call center and to provide customer support services.
The call center implements appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.
The transfer of personal data to the Order Center’s authorized processors (e.g., data hosting providers) is carried out on the basis of agreements concluded between the Order Center and the authorized processors. Authorized processors are required to ensure appropriate safeguards when processing personal data.
You can view and edit your personal information in your user profile in the order center. If you made a purchase without a user account, you can view your personal information through customer support.
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw that consent by notifying customer support via email.
When a customer account is closed at the order center, personal data is deleted, unless such data needs to be retained for accounting purposes or to resolve disputes.
If a purchase is made through the Order Center without a customer account, the purchase history is retained for three years. In the event of disputes related to payments or other matters, personal data is retained until the claim is resolved or the statute of limitations expires.
Personal data required for accounting purposes is retained for seven years.
To have your personal data deleted, please contact customer support via email.
We will respond to your deletion request within one month at the latest and specify the timeframe for deleting the data.
Requests for the transfer of personal data submitted via email will be responded to within one month at the latest. Customer support will verify the individual’s identity and provide information regarding the personal data to be transferred.
The email address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, they should click the appropriate link in the email footer or contact customer support.
When personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to both the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support via email at info@etfl.ee.
Disputes related to the processing of personal data are resolved through customer support (Estonian Association of Travel Agencies, Reg. No. 80004199; Harju County, Tallinn, Pärnu mnt 20, 10141; phone +372 631 3013; email info@etfl.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).