Privacy Policy – Time to Wine

PRINCIPLES OF PERSONAL DATA PROCESSING (PRIVACY POLICY)

Dear Customer,

The data controller for the online store www.ttw.ee (hereinafter: Online Store) is Seconde OÜ (registry code 16023486), located at Rotermanni 2, 10111 Tallinn, Harjumaa, Estonia.

This privacy policy explains what personal data we collect, how and for what purposes we process it, and what your rights are.

PERSONAL DATA PROCESSED

We process the following personal data:

name, phone number, and email address;
delivery address;
bank account number;
information related to the value of purchased goods and services and payment details (purchase history);
customer support data;
IP address and other web usage-related data (cookies and network identifiers).

PURPOSES OF DATA PROCESSING

Personal data is processed for the following purposes:

to manage customer orders and deliver goods;
to analyze purchase history and identify customer preferences;
to process and refund payments;
to provide customer support;
to ensure the functionality of the online store and compile usage statistics;
to send direct marketing messages (only with consent);
to fulfill legal obligations (e.g., accounting, resolving consumer disputes).

LEGAL BASIS FOR DATA PROCESSING

The legal bases for processing personal data are:

Contract performance (Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 6(1)(b));
Compliance with legal obligations (e.g., accounting, consumer protection) (Article 6(1)(c));
Consent, especially for direct marketing and cookies (Article 6(1)(a));
Legitimate interest, such as improving the service and managing customer relationships (Article 6(1)(f)).

DATA DISCLOSURE

In certain cases, personal data may be disclosed to the following parties:

customer service personnel and order handlers;
delivery service providers (name, contact information, and delivery address);
accounting service providers;
IT service providers (e.g., hosting, software support).

All data disclosures are carried out under contractual agreements and confidentiality obligations.

USE OF COOKIES

The website uses cookies to:

enable shopping cart and order functionality;
analyze website visits and improve user experience.
Essential cookies are required for completing orders. Consent is requested for the use of non-essential cookies via a cookie banner. Cookie preferences can be changed at any time.

DATA SECURITY AND ACCESS

We apply organizational, technical, and physical security measures to protect personal data. Access to personal data is restricted to authorized personnel who need the data to perform their duties.

Authorized processors are contractually obligated to ensure data confidentiality and security in accordance with legal requirements.

DATA RETENTION

Upon closure of a customer account, personal data is deleted unless it must be retained under applicable law.

If a purchase was made without an account, the purchase history is retained for up to 3 years.

In the case of consumer or payment disputes, data is retained until the claim is resolved or the statute of limitations expires.

Accounting-related data is stored for 7 years in accordance with the Accounting Act.

DIRECT MARKETING AND CONSENT

Personal data is processed for direct marketing purposes (e.g., newsletters, SMS) only with the customer’s explicit consent. Consent can be withdrawn at any time by:

clicking the unsubscribe link in the email footer;
contacting customer service via email.
In the case of profiling for direct marketing purposes, the customer has the right to object at any time.