These Privacy Terms (hereinafter the Privacy Terms) apply to all users of AS Chemi-Pharm (hereinafter Chemi-Pharm) e-services, as well as to subscribers to the products or services.
We do our best to protect the privacy of our Customers.
By using this site you agree to our data processing terms and conditions.
We confirm that our processing of Personal Data (hereinafter also Data) complies with the relevant legislation of Estonia and the European Union.
Collection of Data
We collect Personal Data when it is necessary to identify and contact our Customers in connection with the provision of products or services or the performance of the Agreement as well as for the performance of our legal duties.
We collect Data:
• when you order a service or goods, register as a Customer or a User of a service or e-services, and in other similar situations;
• when you use different applications (e.g. the online shop) or other services provided by us;
• by using cookies or Data disclosed in your account when you visit our websites;
• for our legitimate interest (e.g. if we deem it necessary to develop products or services);
• from other sources (such as other service providers or public registers such as the Population Register, Commercial Register, etc.), as required, for the purpose of entering into, executing or securing the performance of the Agreement or for performing a legal obligation. Such data processing may also be based on consent.
Personal Data is data that is specifically or indirectly associated with the User as a private individual. The source of your Personal Data indicates which channels or through whom your personal information reaches us.
When placing an order the Data to be submitted by the Customer shall be divided into mandatory and voluntarily transmitted data.
Mandatory Data The following information must be provided by the Customer:
(a) First and last name - required for performance and enforcement of the Agreement;
(b) Personal identification code / date of birth - necessary for the performance and enforcement of the Agreement. If the Customer orders the product by e-invoice, the Customer's personal identification code is required to use the banking services. It is also required in the event that the Customer fails to fulfil its obligations to Chemi-Pharm and remedies are required;
(c) Residence / location address - required for the performance of the Agreement when ordering products. Otherwise, the Agreement cannot be performed and the products ordered cannot be delivered. If the Customer orders the product to be delivered to a third party, the residence information need not be provided, but the Order must indicate the address of the place where the product is to be delivered;
(d) Email address - necessary for the performance and enforcement of the Agreement and billing;
(e) Contact telephone number - necessary for the performance and enforcement of the Agreement, i.e. for the transmission of alerts in the event of malfunctioning of services.
Visitors of the site are allowed to register as Users. When registering as a User you must enter certain information about yourself such as name, email address, etc. We may use this information to:
- contact the User;
- inform the User of promotional offers, new products and services;
- collect User traffic and usage data.
When using our services, the Users sometimes must enter personal information about themselves that is to be transmitted to another person (recipient), such as name, email address, etc.
We have the right to use this information to:
- transmit the relevant information to the person (recipient) designated by the User.
When contacting us through the "Contact" page, the Users must enter certain information about themselves, such as name, email address, etc. We have the right to use this information to:
- contact the User;
- respond to a User request.
We do not transfer personal information to any third party without the permission of the User, unless such disclosure is required by law.
In addition to website statistics, we collect traffic statistics. This information does not include any personally identifiable information about Users and is collected for statistical purposes. We also have the right to transfer such data to third parties on request.
Website visitor identification (cookies)
A cookie is a small text file sent to a User's web browser and stored on the User's device.
We use the following cookies:
- session cookies, which are automatically deleted after each visit;
- persistent cookies that remain after repeated use;
If a User does not wish to receive cookies or wishes to be informed of their placement, the User may change their browser settings accordingly if the User's browser allows it.
Processing of Data and other entitled persons to do so
The Personal Data of the User, which the User has entered upon placing an order, are entered in the Customer register and used for providing sales services and offering goods.
The Customer Data required for posting the goods will be forwarded to the postal service company. We undertake not to transfer registered Personal Data to unauthorised persons, except as required by law.
We have the right to provide Data for use to authorised processors who are partners of Chemi-Pharm and whose details are available at www.chemi-pharm.com and ddifference.com.
The affiliates of Chemi-Pharm are natural or legal persons who process Data on behalf of Chemi-Pharm as controllers. These third parties may not use the Data for any other purpose than to provide the service agreed with us and in accordance with our regulations.
The companies we work with are generally based in Estonia, but in individual cases they may also be located outside Estonia. In the latter case, we will take appropriate measures as controllers to ensure that our Customers' data protection rights continue to be guaranteed.
Under certain data-processing agreements with our partners, co-liability may apply in some cases, meaning that both Chemi-Pharm and its authorised processor are responsible for the processing of the Data. In this case, in addition to Chemi-Pharm's terms, our partner's data protection terms and conditions also apply.
We may also pass on Customer Data to competent government agencies (e.g. security and intelligence, including the police, court or alert centre (112)) when required to do so by law.
We may also process anonymous or aggregated Data that does not relate to you as an individual. Such Data are no longer Personal Data and may be shared for other purposes and for other persons.
We shall apply the required organisational, physical and information technology measures for the provision of the integrity, availability and confidentiality of the Data. The purpose of information security activities is the implementation of the appropriate level upon the protection of information, risk management and prevention of threats. The necessary measures are established under Chemi-Pharm's internal security regulations.
The communication between the Customer and the bank is protected by the SSL security protocol, which ensures that the information exchanged cannot be intercepted or tampered with. The information traffic between us and the bank is digitally signed.
We adhere to the principle that the transmission and collection of Personal Data should be as secure as possible. However, it must be borne in mind that there are always certain risks and no technological system is perfectly secure.
Our employees are subject to data confidentiality and protection requirements. They receive personal data protection training and are responsible for fulfilling their obligations. Our partners are responsible for ensuring that their employees comply with the same rules as we ourselves, and they are responsible for complying with personal data requirements.
While we pay great attention to Customer Data protection, the Customer themselves plays an important role in its success.
Before disclosing your Data to anyone or entering it somewhere, you should always think about who the recipient of the Data is and if it is securely stored.
The publication and sharing of sensitive information, such as passwords, usernames, ID cards, etc., and tools is not allowed! In the case of a communication and Internet service, it shall be taken into account that by allowing other persons to access your Data, either through your own negligence or for any other reason, both the details of the services and the Data of related persons are allowed.
If there is any suspicion or threat of Data collection, processing, or breach of privacy, or if the Data has been leaked to strangers, it is important to let us know immediately! This is the only way to resolve the situation as quickly as possible and to help minimise potential damage.
Customer rights with respect to Data
Right to receive information about your Personal Data
The Customer has the right to access their Personal Data at our disposal at any time. The Customer also has the right to be informed about the purposes of the Data processing, the types of Personal Data, the period for which the Personal Data are stored and the recipients of the Personal Data to whom they have been disclosed. You can access the Data by submitting a written request in a format which can be reproduced. Chemi-Pharm has the right to respond to such requests within 30 days.
Right to rectify Personal Data
If a Customer has discovered inaccurate Data or has changed their Personal Data, it can always be changed by contacting our customer service.
Right to delete Personal Data
In some cases, the Customer has the right to have their Personal Data deleted. This applies in particular to the processing of Data on the basis of consent and legitimate interest. This includes, for example, marketing profiles and the like. However, it is often not possible to completely delete Personal Data because we also use the Data for other purposes for which deletion is not permitted by Agreement or by law.
Right to object
The Customer shall have the right to object at any time to any Personal Data processing operation concerning them which we do for the purposes of a legitimate interest. In submitting a statement of objections, we will weigh the legal interest and, if possible, terminate the Data processing in question.
This right cannot be used in situations where we need to make, file or defend a legal claim (e.g. we believe that the person has breached the Agreement and therefore we need to go to court or other law enforcement agency to protect our rights).
Right to restrict data processing
In certain cases, you may restrict the processing of your Personal Data to the extent required by law by expressly notifying us through customer service.
However, it must be borne in mind that this right requires a very precise formulation of the purpose and may, in certain cases, lead to the suspension of contractual rights and obligations.
Right to data portability
The right to transfer Data gives the Customer additional control over their Personal Data. We allow Data transfers in cases prescribed by law.
Data retention period
We retain the Data for as long as is necessary to achieve the purpose of using the Data or until statutory claims expire and statutory records are retained (7 years under the Value Added Tax Act and the Accounting Act).
Right to apply to Chemi-Pharm or a supervisory authority or a court.
Our Customers always have the right to contact the Data Protection Inspectorate or the court for the protection of their privacy rights and Data. The Data Protection Inspectorate is a state authority that can be addressed for consultation or assistance on topics relating to the protection of personal data.