1. Data Controller
The owner and data controller of the website is:
OÜ TogoSunny
Registry code: 17141420
Address: Kopli tn 82, Harju maakond, Tallinn, 10412, Estonia
Email: info@togosunny.com
TogoSunny is committed to protecting the privacy of its customers and users of the website www.togosunny.com.
This Policy explains how data is collected, used, stored, and protected.
2. Personal data we collect
We collect the data necessary to:
- process orders
- deliver products
- communicate with customers
- provide customer service
Personal data may include:
- first and last name
- company name (if applicable)
- postal address
- telephone number
- email address
This data is collected when:
- placing an order
- creating an account
- requesting assistance
- subscribing to the newsletter
3. Non-personal data
We also collect statistical, non-identifiable data, such as:
- age
- preferred language
- country
- pages visited
- products viewed
- browsing duration
This data is used to:
- identify the most viewed products
- improve user experience
- analyse website performance
4. Purposes of Processing
Personal data is used to:
- process and deliver your order
- fulfil contractual obligations
- respond to customer service requests
- send order-related notifications
- send offers (if newsletter consent is given)
Non-personal data is used for internal statistical purposes.
5. Newsletter and Marketing
Newsletter subscription requires your explicit consent.
You may unsubscribe:
- or by requesting it at info@togosunny.com
- via the link included in every marketing email
6. Modification of Data
You may request the correction or update of your personal data by writing to:
7. Transfer of data to third parties
TogoSunny does not sell or transfer personal data to third parties, except:
a) Payment services: Stripe and EveryPay
For payment processing, necessary data is transmitted to the authorised processor:
- Stripe Payments Europe Ltd. Stripe processes card payments.
- EveryPay processes Estonian bank payments. TogoSunny never receives any card data.
b) Logistics services
Only the information required for delivery is shared:
- postal address
- telephone number
- recipient’s name
Shared with:
- DPD / Omniva / Itella / DHL / other carriers (depending on customer choice)
8. Data Security
TogoSunny applies strict technical and organisational measures:
- access restricted to authorised personnel
- encrypted communication channels (SSL)
- secure data storage
- GDPR compliance
Payment information is never stored on our server.
9. Confidentiality and Online Orders
All data transmitted during an order is treated as confidential.
Payments processed through Stripe are encrypted and handled according to PCI-DSS security standards.
10. Data Retention
Personal data is stored only:
- for the time necessary to fulfil the contract
- according to Estonian and EU legal obligations (e.g., accounting: 7 years)
11. User Rights (GDPR)
You have the following rights:
- right of access
- right to rectification
- right to erasure
- right to object
- right to restrict processing
- right to data portability
- right to withdraw consent (newsletter)
Requests should be sent to: info@togosunny.com
12. Changes to the Policy
TogoSunny may update this Policy.
Users will be notified in case of significant changes.