This Privacy Policy explains how Bedrock Trade OÜ collects, uses, stores and protects personal data when using the website ecoway.ee, placing orders, creating a customer account, submitting enquiries, subscribing to the newsletter, applying for job vacancies and otherwise using our services.

Bedrock Trade OÜ respects the privacy of customers, business partners and website visitors and processes personal data in accordance with applicable data protection requirements.

The controller of personal data is:
Bedrock Trade OÜ
Address: Tallinn, A. Reinvaldi tn 3, Kesklinna linnaosa
Registry code: 12078467
E-mail: info@ecoway.ee
Website: ecoway.ee

Collection of personal data

We collect personal data primarily when a customer or website user:

  • Places an order on the website
  • Creates or uses a customer account
  • Fills in a contact form
  • Sends us an enquiry by e-mail or phone
  • Requests a quote for custom packaging printing
  • Subscribes to the newsletter
  • Applies for a job vacancy
  • Uses our website and online store functions

The data collected may include the following information:

  • Name and company name
  • E-mail address
  • Phone number
  • Delivery and billing address
  • Order details
  • Payment and invoice-related data
  • Customer account data
  • Content of an enquiry or message
  • Order information related to custom packaging printing
  • CV and contact details submitted during recruitment
  • Technical data related to website use, such as IP address, browser type, device information and cookie data

Use of personal data

We use the collected personal data for the following purposes:

  • Receiving and fulfilling orders
  • Delivering products
  • Enabling and verifying payments
  • Preparing invoices and payment documents
  • Communicating with customers
  • Responding to enquiries
  • Managing customer accounts
  • Clarifying custom packaging printing orders and enquiries
  • Preparing quotations
  • Improving service quality
  • Ensuring the operation of the website and online store
  • Sending newsletters and offers where the customer has given consent
  • Reviewing job applications
  • Fulfilling accounting and legal obligations

We do not use personal data for purposes unrelated to our services, orders, customer communication, recruitment or obligations arising from law.

Legal basis for processing personal data

We process personal data only where there is a legal basis for doing so.

The legal basis for processing personal data may be:

  • Performance of a contract, for example receiving, processing, arranging payment for and delivering an order
  • Compliance with a legal obligation, for example retaining accounting records
  • The customer’s consent, for example when subscribing to a newsletter
  • Legitimate interest, for example managing customer communication, improving services and ensuring website security

Orders and online store

When a customer places an order on the website, we use their data to process the order, arrange payment, prepare the invoice and deliver the products.

Order-related data may include the following information:

  • Customer name
  • Company name
  • Contact details
  • Delivery address
  • Billing address
  • Ordered products
  • Order quantity
  • Payment method
  • Delivery method
  • Invoice details

This data is necessary to properly fulfil the order and provide the customer with the required information.

Maksekeskus AS and payment processing

The payment intermediary for payments made in the online store is Maksekeskus AS. Through Maksekeskus, customers can pay using the payment methods displayed on the website, including bank payments, card payments or other payment solutions provided by Maksekeskus.

Bedrock Trade OÜ is the controller of personal data and transfers the personal data necessary for payment processing to the authorised processor Maksekeskus AS.

Maksekeskus AS processes personal data to the extent necessary for mediating payments, confirming payments, providing payment-related technical services and ensuring secure payment processing.

For the purpose of processing payments, the following data may be transferred to Maksekeskus AS:

  • Customer name
  • E-mail address
  • Phone number, where it is related to the order or payment
  • Order number or another order identifier
  • Order amount
  • Selected payment method
  • Technical data related to the payment

Bedrock Trade OÜ does not store the customer’s bank account details, bank payment login credentials or full payment card details in its systems. Sensitive payment data is processed by the relevant payment service provider or Maksekeskus AS in accordance with their terms and security requirements.

Custom packaging printing

In addition to the sale of packaging and disposable tableware, we also offer custom packaging printing. If a customer submits an enquiry or order related to packaging printing, we may also process additional information related to the order.

Data related to custom packaging printing may include the following information:

  • Company logo
  • Design files
  • Printing requirements
  • Packaging type
  • Desired quantity
  • Brand colours
  • Contact details
  • Details related to the quotation or production

This data is used only for preparing quotations, reviewing designs, clarifying orders, organising production and communicating with the customer.

Customer account

When a customer creates an account on the website, we store the data necessary to manage the account. A customer account allows orders to be placed more quickly, previous orders to be viewed and contact details to be managed.

Customer account data may include the following information:

  • Name
  • E-mail address
  • Phone number
  • Delivery address
  • Billing address
  • Information about previous orders

The customer is responsible for ensuring that the data in their account is correct and up to date.

Newsletter and marketing

If a customer subscribes to the newsletter or gives consent to receive marketing communications, we may use their e-mail address to send news, offers, campaigns and other relevant information.

We send marketing messages only where the customer has given consent or where this is permitted under applicable law.

The customer may unsubscribe from the newsletter at any time:

  • By using the unsubscribe link in the newsletter
  • By contacting us at info@ecoway.ee

Recruitment

If a person applies for a job vacancy at Bedrock Trade OÜ, we process the data submitted by them only for the purpose of conducting the recruitment process.

Recruitment-related data may include the following information:

  • Name
  • E-mail address
  • Phone number
  • CV
  • Cover letter
  • Work experience
  • Education
  • Other information voluntarily provided by the applicant

Recruitment data is used only for communicating with the candidate, assessing suitability and making recruitment decisions.

Cookies

Our website may use cookies to ensure the proper functioning of the website, improve the user experience, analyse website usage and support online store functions.

Cookies may be necessary, for example, for the following functions:

  • Shopping cart functionality
  • Login functionality
  • Language selection
  • Website statistics
  • Security
  • Improving user experience
  • Measuring marketing and advertising performance

Website users can manage cookies in their browser settings. Disabling cookies may affect the functioning of certain features of the website or online store.

Data retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with obligations arising from law.

Data retention principles:

  • Order and invoice-related data is retained in accordance with accounting requirements
  • Payment and payment document-related data is retained for as long as necessary to fulfil the order, comply with accounting requirements or meet legal obligations
  • Customer communication data is retained for as long as necessary to manage the customer relationship
  • Data related to custom packaging printing enquiries is retained for as long as necessary for the quotation, production or customer relationship
  • Newsletter-related data is retained until consent is withdrawn
  • Recruitment data is retained until the end of the recruitment process or for the period permitted by law

Where there is no longer a legal or practical need to retain the data, we delete or anonymise it.

Disclosure of personal data

We do not sell or rent customers’ personal data to third parties.

We may disclose personal data to trusted cooperation partners only where this is necessary for providing the service or fulfilling obligations arising from law.

Such parties may include, for example:

  • Maksekeskus AS for payment intermediation and payment processing
  • Other payment service providers where necessary for using the selected payment method
  • Delivery and logistics partners
  • Accounting service providers
  • IT and web hosting service providers
  • Providers of online store technical solutions
  • Marketing and newsletter platforms
  • Printing and production partners where necessary to fulfil a custom packaging printing order

Cooperation partners may use personal data only for providing the agreed service and must ensure the confidentiality and security of the data.

For the purpose of processing payments, Bedrock Trade OÜ transfers the necessary personal data to the authorised processor Maksekeskus AS.

Payment data

Secure payment solutions are used for processing payments made on the website. The payment intermediary for payments made in the online store is Maksekeskus AS.

Maksekeskus AS enables customers to use the payment methods offered on the website and processes payment-related data to the extent necessary to execute, confirm and securely mediate the payment.

Sensitive payment card or bank payment data is not stored in the systems of Bedrock Trade OÜ. Such data is processed by the relevant payment service provider or Maksekeskus AS in accordance with their terms and security requirements.

Transfer of data outside the European Economic Area

If we use service providers through whom data may be transferred outside the European Economic Area, we ensure that appropriate safeguards are applied to protect the data.

Such safeguards may include, for example, contractual data protection clauses, technical security measures or other solutions permitted under applicable law.

Protection of personal data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

To protect personal data, we use measures including:

  • Restricted access to personal data
  • Secure technical solutions
  • Regular maintenance of the website and online store
  • Processing data only to the extent necessary
  • Cooperation with trusted service providers

Access to personal data is granted only to those persons and cooperation partners who need it to perform their duties or provide the service.

Customer rights

Customers and website users have the right to:

  • Receive information about the processing of their personal data
  • Request access to their personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of data where there is a legal basis for doing so
  • Restrict the processing of their personal data
  • Object to the processing of their personal data
  • Withdraw consent where processing is based on consent
  • Request data portability where applicable

To exercise these rights, please contact us at info@ecoway.ee.

If deletion, modification or restriction of data is not possible due to legal requirements, we will explain the reason.

Automated decision-making

Bedrock Trade OÜ does not make automated decisions about customers that would have legal or similarly significant effects on them.

Submitting a complaint

If a customer believes that their personal data has been processed incorrectly or in breach of applicable requirements, we ask them to first contact us at info@ecoway.ee so that we can resolve the issue.

The customer also has the right to contact the Estonian Data Protection Inspectorate.

Changes to the Privacy Policy

Bedrock Trade OÜ reserves the right to amend or supplement this Privacy Policy where necessary.

The most recent version is always published on our website. Changes to the Privacy Policy take effect from the moment they are published on the website.

Contact

If you have any questions about the processing of personal data or this Privacy Policy, please contact us:

Bedrock Trade OÜ
Address: Tallinn, A. Reinvaldi tn 3, Kesklinna linnaosa
Registry code: 12078467
E-mail: info@ecoway.ee
Website: ecoway.ee