Cookie Notice

This cookie notice contains the conditions of and information on how the cookie notice on Indiedrinks’ website is applied, and which cookies are used. You can read about the Indiedrinks’ Privacy Notice.

We would like to point out that this cookie notice applies regardless of the type of device used, i.e. it does not matter whether you visit our website on a tablet, laptop, smartphone or other smart device.

What are cookies and how do they benefit you?
A cookie is a small text file (under 1kB) saved on your device’s (e.g. a laptop, smartphone, tablet) web browser (e.g. Internet Explorer, Google Chrome, Firefox, Safari or Opera) when you visit websites. They are widely used to ensure a better and more efficient performance of websites and to support the personalization of your browsing experience by displaying content that is most likely interesting and relevant to you. The use of cookies is standard procedure for most websites nowadays. By disabling cookies some functions of the website may be impaired.

Cookies are usually held in temporary (TEMP) files, which are either deleted after the browsing session or saved onto the device’s hard drive, depending on the expiry date of the cookie. More information on cookies can be found on the following address: https://www.allaboutcookies.org/

Cookies help us to:
— make the website work according to your expectations;
— remember your devices and settings during and in between visits;
— if necessary, remember your settings and choices during and between visits (e.g. in the shopping cart);
— fix the speed/security of the website;
— constantly improve our website for you;
— make marketing more efficient and personal.

What kind of cookies do we use?
We use two types of cookies, known as session cookies and persistent cookies. These are the cookies used by us and/or third parties.

The type of cookies we use:
— Session cookies are used every time you visit our website. We use these cookies to link your activities on our website, and each session cookie lasts only for the duration of the visit, after which it will expire. Each session begins when you open your web browser and ends when you close it. After visiting the website all session cookies are deleted.
— Persistent cookies allow us to remember your preferences or activities on the website (or between the webpages). They have a longer lifespan than session cookies and they last for the duration of time specified in the cookie, which can vary. These cookies are not deleted by closing the browser and they will be saved on your device. They will be activated every time you visit the website that created the specific persistent cookie.

How do we categorise cookies?
To better understand cookies, we have categorised each cookie as follows:

Strictly necessary cookies and functionality cookies
These cookies are indispensable for the website, allowing the visitor to move around and use various functions, such as language settings, when the visitor moves between different pages during the browser session. Without indispensable cookies certain services of the website may not be possible and the website may not perform as smoothly. Functionality cookies also allow the website to remember your choices and to offer you improved and personalised functions. These cookies do not collect any sort of information for marketing purposes nor in order to remember where you have been on the internet.

Analytical or performance cookies
Performance cookies collect information about visiting the website and help us improve the way the website works. For example, performance cookies can show which pages are most frequently visited, save whatever difficulties may have occurred during the visit and show whether the advertising on the website has been effective or not. Performance cookies do not collect information which would identify the person of the visitor and all information gathered by them is assembled and anonymous.

Targeting or advertising cookies
Targeting or advertising cookies are used to forward you the advertising most fitting with your interests or in order to limit the number of times you see the same advertising on the website. These cookies are also used to help measure the effectiveness of advertising campaigns and to remember what you have looked at on the website.

What cookies do we use on our website?

__ga
Distinguishes between visitors using the website anonymously by generating a unique number combination to show statistic data about how the website is being used, e.g. which particular websites are being visited and how many times
Duration/expiry: 2 years
Provider/third party: Google Analytics
Category: Analytical
Type: HTTP Cookie

__gid
Distinguishes between visitors on the website for the statistics of Google Analytics
Duration/expiry: 24 hours
Provider/third party: Google Analytics
Category: Analytical
Type: HTTP Cookie

__gat
The cookie is used to throttle request rate, in other words to limit data collection on heavy traffic websites
Duration/expiry: 1 minute
Provider/third party: Google Analytics
Category: Analytical
Type: HTTP Cookie

woocommerce_cart_hash
Helps determine when cart contents or data changes.
Duration/expiry: Session
Provider/third party: WooCommerce
Category: Functionality
Type: HTTP Cookie

woocommerce_items_in_cart
Helps determine when cart contents or data changes.
Duration/expiry: Session
Provider/third party: WooCommerce
Category: Functionality
Type: HTTP Cookie

wp_woocommerce_session_
Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.
Duration/expiry: 2 days
Provider/third party: WooCommerce
Category: Functionality
Type: HTTP Cookie

woocommerce_recently_viewed
Stores the information about recently viewed products.
Duration/expiry: Session
Provider/third party: WooCommerce
Category: Functionality
Type: HTTP Cookie

store_notice
Allows customers to dismiss the notices sent by the company on the website.
Duration/expiry: Session
Provider/third party: WooCommerce
Category: Functionality
Type: HTTP Cookie

woocommerce_snooze_suggestions
Allows dashboard users to dismiss marketplace suggestions.
Duration/expiry: 2 days
Provider/third party: WooCommerce
Category: Functionality
Type: HTTP Cookie

woocommerce_dismissed_suggestions
Count of suggestion dismissals.
Duration/expiry: 1 month
Provider/third party: WooCommerce
Category: Analytical
Type: HTTP Cookie

tk_ai
Stores a randomly-generated anonymous ID. This is only used within the dashboard area and is used for usage tracking.
Duration/expiry: Session
Provider/third party: WooCommerce
Category: Analytical
Type: HTTP Cookie

How to manage cookies?
If you have not set up your browser in a way that it refuses all or certain types of cookies, then cookies will be assigned at the moment you visit the website. When visiting our website for the first time, a notification regarding the use of cookies will be displayed (cookie notification). In order to accept the use of cookies click on the “Accept” button. If you do not click on the “Accept” button or click on the “Deny” button, you have not given your consent to the use of cookies. In that case no cookies will be installed, with the exception of those necessary for the functioning of our website – the strictly necessary cookies (functionality cookies).

Strictly necessary and functionality cookies go along with using our website. When refusing these cookies, we cannot predict how well the website will function. You can control the use of analytic cookies, targeting cookies or advertising cookies by adjusting your browser settings.

Most browsers allow you to control cookies through the user preferences of your settings. If you prefer to not accept cookies you can set your browser in a way that it refuses all cookies or sends out a warning when receiving a cookie. We cannot delete the cookies that are already placed on your web browser. In case you would like to remove cookies from your device, different web browsers have help pages with information on how to remove cookies. When using several browsers do not forget to remove cookies from all of them. 

We would like to draw your attention to the fact that by deleting or refusing cookies you may lose access to certain areas or functions on our website. Adjusting cookie settings also affects other websites you visit.

If you would like more information about the cookies used on our website, please get in touch via the following e-mail address: privacy@indiedrinks.direct

The applicability and changes to the cookie notice
We have the right to unilaterally change our cookie notice at any time in accordance with the applicable law.
This cookie notice has been approved and published on 23 October 2020.

Privacy Notice & GDPR

Your privacy is important to us
We value your right to privacy and data protection. We want you to know for which purposes and how we collect and use your personal data (also known as personal information) and which rights you have. You will find important information about the processing of your personal data in this Privacy Notice. The Privacy Notice may be supplemented by other privacy notices and notices applicable to cookies (Cookie Policy) published on the Indiedrinks’ website.

This Privacy Notice applies to the processing of personal data by the Indiedrinks.direct OÜ (registered in the Republic of Estonia under registry code 16160941 and registered office at Suur-Sõjamäe 14, 11415 Tallinn, Estonia; hereinafter Indiedrinks, we or us).

1. Definitions
The following terminology is used in these Privacy Terms in the following meaning:
Data Subject is a natural person on who Indiedrinks has data or information that can be used to identify the natural person. Data Subjects are, for example, Clients who are natural persons, co-operation partners and individuals associated with them, individuals associated with the corporate Clients or sellers (e.g. representatives or employees);

Personal Data is any information relating to an identified or identifiable Data Subject, including the Client or natural persons related to the Client;

GDPR is the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;
Client Data is any information (incl. information treated as Personal Data) that is known to Indiedrinks about the Client or its representatives;

Client is any natural or legal person who uses, has used or has expressed an intention to use the services provided by Indiedrinks or is otherwise associated with our services;

Third Party is a natural or legal person, public authority, agency or body, and any person other than the Data Subject, Indiedrinks, an authorized employee of Indiedrinks, or a person who may process the Personal Data of the Data Subject under the authority of Indiedrinks or Processor of Indiedrinks;

Agreement is a contract with any content concluded between Indiedrinks and the Client, primarily Terms and Conditions for Purchaser or Terms and Conditions for Seller;

Processing means any operation or set of operations, which is performed on Personal Data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, regardless of the method of operation or the used means;
Processor means a natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of Indiedrinks, the controller.

2. Security
Indiedrinks takes the security of all data in its possession very seriously. Indiedrinks ensures the confidentiality of Client Data and Personal Data under applicable law and implements appropriate technical and organisational measures to protect Personal Data from unauthorized access, unlawful Processing or disclosure, accidental loss, alteration or destruction.

Indiedrinks may use Processors for Processing of Personal Data. In such cases, Indiedrinks will ensure that the Processing of Personal Data is carried out in accordance with Indiedrinks’ instructions and in accordance with the applicable law and this Privacy Notice. We apply contractual and appropriate security measures to protect your Personal Data and maintain confidentiality.

As soon as we receive your data, we implement reasonable security measures and procedures to avoid unauthorised access from any third party. However, transmission of such data over the Internet using personal computers or mobile devices is not completely safe and, therefore, we cannot guarantee absolute security of all information submitted to our website and/or to us. Any transmission of such information and documents is at your own risk.

3. How do we collect your Personal Data?
Indiedrinks collects Personal Data primarily in the following ways:
— we mainly collect Personal Data from the Client or other Data Subject itself or from the persons acting on the Client’s or other Data Subject’s instructions (e.g. through requests, applications, conclusion and performance of Agreements);
— in the context of providing services (e.g. sale of alcoholic and non-alcoholic beverages);
— Personal Data, including e-mail correspondence, emerged as a result of normal communication between the Data Subject and Indiedrinks;
— Personal Data clearly disclosed by the Data Subject (e.g.in social media);
— Personal Data generated by the use of services provided by Indiedrinks (e.g. executing transfers);
— Personal Data received from Third Parties (e.g. from the commercial register, or other databases and national registers);
— Personal Data combined by Indiedrinks (e.g. history of provided services and Client communication).

4. Which Personal Data do we process?
The categories of Personal Data that Indiedrinks mainly, but not exclusively, collects and processes are the following:
— person’s identification data (e.g. name, personal identification code, date of birth, details of the identification document (e.g. copy of passport, ID card and/or driving license));
— contact details (e.g. address, phone number, e-mail address, language of communication);
— data of the Data Subject’s employer and position;
— any financial and tax information;
— data about the Data Subject’s business activities and relationships with legal persons (e.g. information submitted by the Data Subject or retrieved from public registers or received through Third Parties for making transaction on behalf of a legal person);
— information on the Data Subject’s authorisations;
— information relating to the provided services (e.g. performance or non-performance of Agreements, concluded and terminated Agreements, submitted applications, queries and complaints);
— Client’s satisfaction data (e.g. activeness of using the services, data on services used, Client’s complaints);
— data connected with the website and account usage such as member ID, user ID, user PIN, login status, services which you plan to use, log information, device information, browser information, location information (if enabled), activeness of using services, Internet Protocol (IP) address;
— communication data (e.g. data collected via e-mail, messages and other communication means (incl. social media)).

Indiedrinks primarily uses the following Personal Data for marketing purposes:
— e-mail address and name of the Data Subject (incl. the Client);
— information on the provided services.

In addition to the categories of Personal Data explicitly stated in this Privacy Notice, Indiedrinks may collect additional and other Personal Data in accordance with the law, if needed.

The provision of Personal Data for using services, e.g. registering an account, is statutory and required to enter into Agreement, therefore, Data Subject is obligated to provide required Personal Data. Without providing required Personal Data it is not possible to use services or some services are limitedly accessible, and Indiedrinks could refuse to provide services.

5. For which purposes and on which legal bases do we process your Personal Data?
Indiedrinks processes your Personal Data primarily to:
— manage customer relations in general, in particular to keep data updated and corrected by verifying and enriching data, respond to your requests and questions, notify about changes to services, provide customer support, based on:
— performance of Agreement or in order to take steps at the request of the Data Subject prior to entering into Agreement or compliance with a legal obligation;
— provide access to services, provision of services, in particular to conclude and execute Agreement, establish an account, keep data updated and corrected by verifying and enriching data, delivery the goods, resolving Client’s complaints, based on:
performance of Agreement or in order to take steps at the request of the Data Subject prior to entering into Agreement or compliance with a legal obligation;
— complying with requirements set out to us by law based on:
— compliance with a legal obligation
— prevent misuse of website and/or services and ensure adequate provisions of website and/or services, in particular to authorize and control access to and functioning of digital channels, prevent unauthorized access and misuse of those and to ensure the safety of information, based on:
— performance of Agreement or take steps at the request of the Data Subject prior to entering into Agreement or compliance with a legal obligation or Indiedrinks’ legitimate interests to have control over authorizations, access to and functioning of website and services;
protect interest of Indiedrinks, based on:
— performance of Agreement or in order to take steps at the request of the Data Subject prior to entering into Agreement or compliance with a legal obligation or Indiedrinks’ legitimate interests to prevent, limit and investigate any misuse or unlawful use or disturbance of website and/or services;
— establishing, exercising and defending legal claims, based on:
— performance of Agreement or in order to take steps at the request of the Data Subject prior to entering into Agreement or compliance with a legal obligation or Indiedrinks’ legitimate interests to exercising legal claims;
— send marketing and useful information by e-mail, incl. market Indiedrinks services, special offers, promotions, contests or entitlements that may be of interest to you, based on:
— consent of Data Subject or Indiedrinks’ legitimate interest;
administrate and improve the website and/or services, for our internal records, for statistical analysis, based on: Indiedrinks’ legitimate interests to improve its services;
improve technical systems and structure of information technology, based on:
— Indiedrinks’ legitimate interests to improve its services.

In the case that we are going to use your personal data for other purposes as provided above, we will communicate it to you in a timely manner.

6. Who do we transfer your Personal Data to?
Indiedrinks transfers Personal Data to the following recipients:
employees authorised by Indiedrinks for such purpose;
public authorities (e.g. law enforcement agencies, courts, bailiffs, tax authorities, and supervisory authorities);
sellers and/or manufacturers whose products are sold on the website (only in case of business-to-business relationship, and it involves only personal data of the company’s employee or representative);
persons related to the provision of services and performance of Agreement concluded with the Client (e.g. payment intermediaries, providers of communication, IT, data processing, data backup, translation, courier and postal services, IT application providers, advertising and marketing partners, provider of the destruction of confidential documents, opposite parties of the court proceedings and their representatives);
auditors, accounting service providers, financial consultants or other Indiedrinks’ consultants;
payment default registrars to whom information is transmitted to enable Third Parties to assess the Client’s payment behaviour and creditworthiness;
the debt collection service providers, courts and trustees in bankruptcy if the Client has violated Agreement;
if the Client has violated the Agreement, the debt collection service providers, courts and bankruptcy or insolvency administrators;
participants and/or parties involved with payment systems and payment solutions.

7. Where is Your Personal Data being processed?
As a general rule, Processing of Personal Data takes place within the European Union / European Economic Area (EU/EEA). If there is a need to Process Personal Data outside EU/EEA, the transfer will only take place if appropriate safeguards are implemented. Examples of appropriate safeguards include:
an adequate level of data protection is in place in the country outside of the EU/EEA in accordance with the decision of the European Commission;
existence of a valid Agreement containing standard contract clauses developed by the EU or approved codes of conduct or certifications or other similar things that comply with the GDPR.

In the absence of appropriate safeguards, Indiedrinks has the right to transfer Personal Data outside the EU/EEA in situations where:
the Data Subject has given an explicit and informed consent about the lacking protection measures;
it is necessary for the conclusion or performance of Agreement between the Client and Indiedrinks or for the implementation of pre-contractual measures taken at the request of the Data Subject;
it is necessary for the conclusion or performance of a contract concluded in the interest of the Data Subject between Indiedrinks and another natural or legal person;
it is necessary for the establishment, exercise or defence of legal claims;
it is necessary in order to protect the vital interests of the Data Subject or other persons, where the Data Subject is physically or legally incapable of giving consent;
the transfer is made from a register which according to European Union or national law is intended to provide information to the public and which is open to consultation either by the public in general or by any person who can demonstrate a legitimate interest, but only to the extent that the conditions laid down by European Union or national law are fulfilled in the particular case;
the transmission is not repetitive, concerns only a limited number of Data Subjects, is necessary to protect Indiedrinks’ legitimate interests, for which the interests, rights or freedoms of the Data Subject are not predominant, and if Indiedrinks has assessed all data transfer circumstances and established based on the assessment appropriate safeguards for Personal Data protection. Indiedrinks will notify the supervisory authority of the transfer.

For receiving more information about the transfer of Personal Data outside the EU/EEA, please contact us by e-mail: privacy@indiedrinks.direct.

8. How long do we store your Personal Data for?
Indiedrinks does not Process Personal Data for longer than it is necessary for the purposes related with such data and/or to comply with the statutory data storing obligations. The retention period may also be based on the Agreements with the Client (e.g. to settlement a dispute arising from the Agreement concluded with the Client), Indiedrinks’ legitimate interest or applicable law (e.g. legislation about accounting or limitation period).

As a general rule, the retention period for Personal Data and documentary evidences used in the course of provision of our services is maximum of 5 years. Personal Data Processed under your consent will only be Processed until the consent is withdrawn.

9. Responsible persons and Indiedrinks contact details
Indiedrinks.direct OÜ is the controller for the Processing activities described in this Privacy Notice. If you have any questions regarding the Processing of your Personal Data, please contact us in the following ways:

address: Suur-Sõjamäe 14, 11415 Tallinn, Estonia
e-mail address: privacy@indiedrinks.direct

Indiedrinks will reply to the request within 30 days after receiving the request. If more time is needed to reply to the request, Indiedrinks may extend the term for responding by a reasonable time.

10. Children Under the Age of 18
Indiedrinks’ services are not intended or directed at individuals under the age of 18. Therefore, individuals under the age of 18 may not access or use the services on the website.

11. What rights do you have and how to use them?
The Data Subject has the following rights in connection with the Processing of his/her Personal Data:
to obtain information about the Processing of their Personal Data and the right to request a copy of the Personal Data being Processed;
to request the rectification of their Personal Data if it has changed or is otherwise inaccurate;
to object to the Processing of their Personal Data if the Processing of Personal Data is based on a legitimate interest. For example, the Client may prohibit the use of their contact information for sending offers, to use it, the Client can remove itself from the list of the recipients upon receipt of the marketing email;
to request restriction of the Processing of their Personal Data, for example at a time when Indiedrinks assesses whether the Client is entitled to delete its Personal Data;
to withdraw their consent for Processing of Personal Data. Upon withdrawal of the consent, Indiedrinks will no longer Process the Personal Data of the Data Subject for the purpose of the respective consent. The consent is valid until it is withdrawn;
data portability right;
to request deletion of their Personal Data, for example, if Indiedrinks has no right to Process such data or if the Processing of Personal Data is based on a consent and the consent has been withdrawn. Such right does not apply (or to such an extent) if Processing of Personal Data that is requested to be deleted is also been Processed for other legal bases, for example, under Agreement or for the performance of legal obligations;
to contact us at any time regarding the use of their Personal Data. To do so, please send us an e-mail at privacy@indiedrinks.direct. You also have the right to lodge a complaint to the Estonian Data Protection Inspectorate (website: www.aki.ee) or to a competent court.
The Data Subject can exercise its rights by contacting us at support@indiedrinks.direct. We will respond to the request without delay, but not later than within one month from receiving the request.

12. Validity and changes to Privacy Notice
Indiedrinks has the right to unilaterally amend the Privacy Notice at any time in accordance with the applicable law.
Indiedrinks will notify the Data Subject of any changes to the Privacy Notice via the website and by the e-mail at least one month before the changes take effect, except if the Privacy Notice is amended as a result of changes in legislation.