Privacy policy

Personal data is information that is collected in order to enter into an individual contract with a buyer and/or customer.

Payment is made outside the GRO.UNISON online store in a secure environment — via a bank link payment in the secure environment of the respective bank, and via credit card payment in the secure environment of Montonio Finance OÜ. The seller has no access to the customer's bank account information or credit card details. BARBERPRO OÜ is the primary processor of personal data; BARBERPRO OÜ transfers the personal data necessary to process payments to the authorized processor Montonio Finance OÜ.

A customer's personal data may be collected in the following ways:

• contact information (including your name, personal identification code, postal address, phone number, email address, and preferred contact method) on our website or elsewhere (e.g., in stores)

• through use of the website via customer account information or cookies

• when making a purchase or placing an order in our store or online store, in order to store contact details or purchasing preferences (GRO.UNISON may request voluntary personal data and personal information on certain pages of the website. Required personal data may include name, address, postal code, email address, phone number, and other information)

We also collect unregistered data — data that cannot be directly linked to any one specific individual (gender, age, language preferences, location).

We may also collect data on the generalized activity of customers in our stores and on the website. This data is aggregated and used to provide more useful information to our customers, and helps us understand which parts of the website, products, and services are most appealing. Aggregated data is treated as personal data under this Privacy Policy.

By collecting personal information, we may keep our customers informed about product news, campaigns and upcoming events from GRO.UNISON. Any customer who does not wish to be on our newsletter list or receive notifications about products that may be of interest to them can be removed from the target audience of recipients at any time. We use the personal information we collect to deliver goods and to fulfil our obligations to the customer.

GRO.UNISON may share information about individual users with third parties that provide services to GRO.UNISON in order to better serve our customers, and such parties are obligated to keep confidential information secure. A third party may be, for example, our partner whose role is to deliver goods.

Personal information collected for the purpose of identifying and contacting the Customer may be viewed, edited, and updated on our website in the "My Information" section.

GRO.UNISON takes all necessary precautions (including administrative, technical, and physical measures) to protect customers' personal data. Access to editing and processing of data is restricted to authorized personnel.

All personal information collected by the GRO.UNISON online store during your visit and purchases will be treated as confidential. An encrypted data transmission channel with banks ensures the security of customers' personal data and banking details.

By using the GRO.UNISON website or the loyalty client application, you have read and accepted these terms and conditions. We reserve the right to amend the general terms and conditions of the Privacy Policy when necessary, notifying all regular customers accordingly. For any questions regarding the Privacy Policy or data processing, please contact us at info@grounison.com.

The data controller of the GRO.UNISON online store is BarberPro OU (14718534), phone +372 56688568 and email info@grounison.com.

The personal data processed includes:

• name, phone number and email address; • delivery address; • bank account number (for refunds); • cost of goods, services and payment-related data (purchase history); • customer support information.

Personal data is used to manage customer orders and deliver goods.

• Purchase history data (date of purchase, item, quantity, customer details) is used to provide an overview of purchased goods and services and to analyse customer preferences. • Bank account number is used to issue refunds to the customer. • Personal data such as email address, phone number, and customer name is processed to resolve matters related to the provision of goods and services (customer support). • The web store user's IP address or other network identifiers are processed to provide the web store as an information society service and to make use of internet usage statistics.

• Personal data is processed for the purpose of fulfilling a contract with the customer. • Personal data is processed for the purpose of compliance with a legal obligation (e.g., accounting and dispute resolution). • Recipients to whom personal data will be transferred. • Personal data is transferred to the online store support service for purchase history and customer issue resolution. • The name, phone number, and email address are transferred to the shipping carrier selected by the customer. In the case of courier-delivered goods, the customer's address is also transferred in addition to the contact details. • When the online store is hosted by a service provider, personal data is transferred to the service provider for accounting purposes. • Personal data may be transferred to IT service providers if necessary to ensure the functionality of the web store or data storage.

Personal data is stored on servers of cloud infrastructure providers located within the European Union or the European Economic Area.

Access to personal data is granted to online store employees who may access personal information to resolve technical issues related to the use of the online store and to provide customer support services.

The online store implements appropriate physical, organisational, and information security measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised access, and disclosure.

The transfer of personal data to online processors (such as shipping service providers and data storage providers) is carried out on the basis of contracts between the online store and authorised processors. Authorised processors are required to ensure appropriate safeguards in the processing of personal data.

Personal data can be viewed and edited in your online store user profile. If a purchase was made without a user account, you can access your personal information through cluster support.

If the processing of personal data is based on the client's consent, the client has the right to withdraw that consent by notifying customer support via email.

Upon closure of a customer account in the online store, personal data will be deleted, unless such data must be retained for accounting purposes or for the resolution of consumer disputes.

If a purchase was made without a customer account in the online store, the purchase history will be retained for three years.

In the event of disputes related to payment and consumer claims, personal data will be retained until the claim has been resolved or the limitation period has expired.

Personal data required for accounting purposes will be retained for seven years.

To remove your personal information, please contact our support team by email. Deletion requests will receive a response within one month, with a specified deadline for the removal of your data.

Request for transfer of personal data submitted by email will be processed within one month. The customer support team will verify the identity of the requester and the personal information to be transferred.

The email address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing notifications, they should select the appropriate link in the email footer or contact customer support.

When personal data is processed for direct marketing purposes (profiling), the customer has the right at any time to object to the processing of their personal data, both initial and subsequent, including for direct marketing, by notifying customer support via email.

Disputes related to personal data processing are available through the support service info@grounison.com. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).