Introduction
These privacy terms comply with the General Data Protection Regulation (EU 2016/679) and Estonia’s Personal Data Protection Act. They apply to customers of HUPPA OÜ.
Data Controller: HUPPA OÜ (Registration Code: 10729506)
Address: Männiku tee 101, Tallinn
Phone: +372 6559507
Email: info@huppa.eu
The privacy terms cover what personal data is collected, why it is collected, how it is handled, your rights, and contact information for exercising those rights.
Useful Terms
Customer: Any natural or legal person using HUPPA services, having used them, or expressing interest in purchasing goods and services.
Data Subject: A natural person identifiable through HUPPA’s information, including customers, visitors, and inquiry submitters.
Personal Data: Any information about an identified or identifiable natural person.
Processing: Operations performed on personal data, including collection, documentation, organization, storage, retrieval, use, disclosure, and deletion.
Personal Data Collected
HUPPA processes customer data only lawfully and for stated purposes:
- Name, phone number, and email address
- Delivery address
- Bank account number
- Payment-related data and purchase history
- Customer support information
Purpose and Legal Basis for Processing
HUPPA has legal grounds to process personal data to establish, maintain, and terminate customer relationships and fulfill contractual obligations.
Processing Purposes:
- Managing orders and delivering goods
- Analyzing purchase history and customer preferences
- Processing refunds via bank accounts
- Resolving customer service issues
- Providing online store services and compiling web usage statistics
Legal Basis:
- Contract performance with customers
- Fulfilling legal obligations (accounting, consumer dispute resolution)
- Customer consent for marketing and product information
Access and Data Security
HUPPA ensures confidentiality through secure storage and protects data against unauthorized access, illegal processing, disclosure, accidental loss, alteration, or destruction.
Access is restricted to authorized HUPPA representatives and designated employees. Certain data may be transferred to authorized processors to fulfill contractual and legal obligations.
Information exchanges use secure channels with multiple access codes and identification systems to prevent third-party access and minimize data leakage risks.
Cookies
Small files called cookies are stored on user devices to ensure proper website functioning and remember user actions and preferences.
Cookie Uses:
- Personalizing content and ads
- Providing social media features
- Analyzing website usage
Users can delete or block cookies through browser settings. However, some website features may not function properly without cookies.
The site uses Google Analytics (provided by Google, Inc.) to analyze user website behavior. Users can disable data collection via the browser add-on at: https://tools.google.com/dlpage/gaoptout
Data Sharing
HUPPA transfers personal data to third parties when legally required, necessary for operations, fulfilling obligations, or on other legal grounds.
Data Recipients:
- Authorized processors (accountants, IT administrators, customer support managers)
- Authorities (law enforcement, courts, notaries)
- Service providers (transport, couriers, payment intermediaries, postal services)
- Legal advisors, financial advisors, insurers
Personal data transfers outside the EU occur only with legal basis, including to recipients in countries with adequate data protection or meeting EU transfer requirements.
Data Retention and Deletion
HUPPA retains personal data only as long as necessary for stated purposes and legal obligations.
Retention Periods:
- Account closure: Data deleted unless required for accounting or dispute resolution
- Purchases without account: Purchase history retained for three years
- Payment/consumer disputes: Data retained until claim fulfillment or limitation period expires
- Customer agreements: Information retained for three years
- Accounting records: Retained for seven years (legally required)
- Consent-based processing: Stored until consent withdrawal
Customer Rights
Customers have the following rights:
- Access information about themselves and receive data copies
- Request correction of outdated or incorrect data
- Request data deletion or processing cessation if no legal basis exists
- Request data transfer to third parties
- File complaints with supervisory authorities
Users can view and correct personal data in their online store profile. For purchases without accounts, contact customer support.
To withdraw consent for processing, notify customer support via email at info@huppa.eu.
Misuse Reporting
If customers suspect personal data misuse, they should immediately notify HUPPA at: info@huppa.eu
Policy Updates
HUPPA reserves the right to update and change the privacy policy. Changes become visible on the HUPPA website.