Birico is committed to protecting the personal data of its customers and visitors to the online store, as well as respecting their rights when processing this data. For this purpose, we have formulated the principles of the privacy policy regarding the collection, use, disclosure, transmission and storage of personal data.

Our goal is to make our website visitors feel safe when using our online services. By implementing administrative and advanced technical measures, we ensure the protection of all personal data to the highest standards, in compliance with relevant EU and other applicable laws.

GENERAL SETTINGS

1.1 The personal data of the Birico.com website is managed by 2BMU OÜ (registry code 16090620), located at Kalevi 32a-13, Tallinn 10413, Estonia, e-mail address info@birico.com.
1.2 This privacy policy applies to all persons who use the website, and all Birico employees and partners who come into contact with personal data have the rights and obligations described in the privacy policy.
1.3 We reserve the right to change the terms of the Privacy Policy by notifying affected individuals by email.
1.4 By using our website, birico.com, it is assumed that you have read and accepted the Privacy Policy.

PRINCIPLES

2.1 The processing of personal data is based on EU legislation and the laws of the Republic of Estonia, prioritizing the interests, rights and freedoms of customers and website visitors.
2.2 Personal data is processed responsibly and according to best practices, following the principle of purposefulness.
2.3 The processing of personal data is based on a legal basis.
2.4 Personal data is collected to a specified and clearly stated extent and for legal purposes. Such data will only be stored for as long as is necessary to fulfill the intended purpose and legal obligations. In case of consent, the data will be stored until the consent is withdrawn.
2.5 Personal data is processed securely and confidentially, protected against unauthorized or illegal processing by appropriate technical or organizational measures.
2.6 The processing of personal data is transparent, ensuring that individuals have sufficient information and are informed of data processing procedures.
2.7 Birico does not knowingly collect personal data of persons under the age of 13, stopping such processing immediately upon learning.

COMPOSITION OF PERSONAL DATA

3.1 Personal data includes any information about an identified or identifiable natural person (data subject).
3.2 We collect both personal and non-personal data.
3.3 The following personal data is collected: 3.3.1 Data provided by the person when placing an order and/or creating a customer account (e.g. name, e-mail, postal address, telephone number). 3.3.2 Data received from third parties. 3.3.3 Purchase history and order details. 3.3.4 Customer Support Information.
3.4 Non-personal data includes information generated when you visit and use the website (eg access data, session data, geographic location, search engine data and IP address). This data is not used to collect personal data, but for purposes such as providing online services, targeted advertising, optimizing the website, compiling statistics and analyzing visitor behavior to improve the service.
3.4.1 In addition to the above, the data processor has the right to collect data about customers that are available in public registers.
3.4.2 The legal basis for personal data processing is Article 6 paragraph 1 points of the General Data Protection Regulation a), b), c) and f): a) the data subject has consented to the processing of his personal data for one or more specific purposes; b) the processing of personal data is necessary for the performance of a contract to which the data subject is a party, or at the request of the data subject before the conclusion of the contract; c) the processing of personal data is necessary to fulfill a legal obligation to which the controller is subject; f) the processing of personal data is necessary to achieve the legitimate interests of the controller or a third party, unless these interests are outweighed by the interests of the data subject or fundamental rights and freedoms that require the protection of personal data, especially if the data subject is a child.
3.5 The payment methods used in the online store are encrypted and secured by banking and other service providers. This ensures that financial data exchanged during transactions is not exposed to us. 2BMU OÜ transfers the necessary personal data for payment processing to the authorized processor Montonio Finance UAB (Montonio Finance OÜ).

COLLECTION AND PROCESSING OF PERSONAL DATA

4.1 Processing of personal data includes any operation with respect to such data.
4.2 Personal data is collected on the basis of consent or within the limits permitted by law, established by the data subject. Consent may be given in writing, electronically or verbally and must be voluntary, specific and unambiguous.
4.3 The customer’s personal data is collected only if the customer himself discloses it during the purchase or return process, accompanied by consent for collection and processing. The customer is responsible for the accuracy of the personal data provided.
4.4 Personal data is used to manage orders, ensure delivery of orders and fulfill customer obligations.
4.5 Purchase history data is used to analyze customer preferences and improve product selection.
4.6 Personal data may be processed in the case of legitimate interest to improve product selection, availability and service quality, after careful evaluation.
4.7 Personal data may be processed in the case of legitimate interest to organize campaigns, such as personalized offers and customer satisfaction surveys.
4.8 Personal data may be transferred to third parties to fulfill obligations related to the order, such as delivery of the order, under agreements that ensure data protection and use only for the performance of the agreement.
4.9 Personal data may be processed in case of legitimate interest in connection with the preparation, presentation or defense of legal claims.
4.10 By submitting personal data, the data subject grants the data processor the right to collect, organize, use and manage personal data in accordance with the purposes described in the privacy policy, which the data subject directly or indirectly transmits to the data processor when purchasing goods or services on the website.
4.11 The data subject is responsible for ensuring that the data provided by him is accurate, correct and complete. Intentionally providing false information is considered a violation of the privacy policy. The data subject is obliged to immediately notify the data processor of changes in the data provided.

NEWSLETTER

5.1 Direct marketing content is only transmitted based on express consent, which is clearly distinguished from other topics and easily understood.
5.2 Consent to subscribe to the newsletter is requested at the time of purchase or when registering a customer account. Alternatively, consent can be given via a separate form in the footer of the website.
5.3 Newsletter subscribers may unsubscribe at any time by submitting a corresponding request.

PROTECTION AND SECURITY OF PERSONAL DATA

6.1 All necessary precautions are taken to protect the customer’s personal data, including administrative and technical measures. Collected personal data is treated confidentially, access is limited to authorized persons only for data processing and modification.
6.2 Personal data is stored as long as customers use the services and do not request data removal, accounting data is stored for the period required by law.
6.3 In case of information leaks or incidents related to personal data, appropriate measures will be taken to mitigate the consequences and prevent future incidents. Such incidents are recorded and the relevant authorities and data subjects are notified.

RIGHTS OF DATA SUBJECTS

7.1 Data subjects have the right to access their personal data by obtaining information about the origin of the data, the purpose of the processing, the legal basis and the categories of recipients.
7.2 Data subjects have the right to request correction of incorrect, inaccurate or incomplete personal data and to replace or supplement their personal data.
7.3 Data subjects have the right to demand the deletion of personal data if they are no longer needed or if their processing has been illegal, taking into account the legal storage grounds.
7.4 Data subjects have the right to receive information about all personal data about them and to prohibit their processing for marketing purposes.
7.5 Data subjects have the right to withdraw their consent to the processing of personal data at any time.
7.6 Data subjects have the right to file a complaint with the Data Protection Inspectorate, at Väike-Ameerika 19, 10129, Tallinn, advice: +372 5620 2341, info: +372 627 4135, e-mail: info@aki.ee, web: http://www.aki.ee.

Please also read Birico’s terms and conditions of sale.