This privacy policy regulates the principles of collection, processing and storage of personal data. Personal data are processed and stored by Rice&Nori OÜ, who is the controller of the personal data (hereinafter the controller).

For the purposes of this privacy policy, a data subject means the customer or another natural person whose personal data are processed by the controller.

For the purposes of this privacy policy, a customer means anyone who purchases goods on the controller’s website.

The controller observes the principles relating to personal data processing provided by legislation and, among other things, processes personal data in a lawful, fair and secure manner. The controller is able to declare that personal data have been processed in accordance with the provisions of legislation.

Collection and processing of personal data

The personal data collected, processed and stored by the controller have been collected electronically via the website.

Personal data are used to manage the customer’s orders and deliver goods.

The controller may process the data subject’s personal data, such as the given name and surname, phone number, e-mail address, delivery address.

By sharing their personal data, the data subject grants the controller the right to collect, arrange, use and administer, for the purpose defined in the privacy policy, the personal data that the data subject shares with the controller either directly or indirectly when placing orders on the website.

The data subject is liable for the accuracy, correctness and integrity of the data submitted by them. Submission of knowingly false data is regarded as a breach of the privacy policy.

The controller is not liable for any damage or loss caused to the data subject or a third party as a result of submission of false data by the data subject.

The controller has the right to share personal data of customers with third parties such as processors, accountants, transport and courier companies, companies providing transfer services. The controller is in charge of processing of personal data. The controller transmits the personal data necessary for making payments to the processor, Maksekeskus AS.

Rights of the data subject

Your rights as a data subject are listed below: If you want to exercise any of the rights, please contact us via the contact details set out on the www.sushiplaza.ee website.

The data subject has the right to obtain information on the processing of their personal data.
The data subject has the right to rectify their data if they are inaccurate or incomplete.
The data subject has the right to ask that the information stored about them be erased in part or in full.
The data subject has the right to object to processing of a certain type of data, including to processing regarding direct marketing and profiling.