How to ask for deletion
There are three ways, and they all end in the same place. Choose whichever is easiest for you.
If you can still sign in
- Sign in to your account, in the app or on the website.
- Open My account, then Settings, then Privacy, and choose "Open privacy settings".
- On that page choose to delete the account and confirm it with your password.
- We receive the request, carry it out, and write to you when it is done.
Open the privacy settings of your account
If you cannot sign in
- Fill in the form on this page, using the e-mail address your account is registered to.
- Choose the option for deleting the customer account and the personal data behind it.
- Tick both boxes and send the request.
- We send a confirmation link to that address. It is valid for 48 hours.
- Follow that link. Nothing is deleted before you do, which is what stops anyone else asking for your account to be deleted.
- We receive the request, carry it out, and write to you when it is done.
By e-mail
Write to [email protected] from the address your account is registered to and tell us you want it deleted. We may ask you to confirm the address before we act on it.
What we delete
When the request is carried out, the following is deleted from our systems:
- Account and sign-in data
- Your name, e-mail address, telephone number, password, date of birth and gender, and the link to Facebook if you ever signed in with it.
- Addresses
- Every delivery and billing address saved in your address book.
- Subscriptions and consents
- The newsletter, back-in-stock alerts and the push notifications of the app, together with the devices they were sent to.
- Bonus programme
- Your points balance and the record of how it was earned and spent. Unused points are lost with it and cannot be restored afterwards.
- Wish list and unfinished carts
- Everything you saved for later, and any cart you never ordered.
- Reviews and questions
- Product reviews and questions you left are removed, or kept without anything that identifies you — say in your request which you would prefer.
- Correspondence
- Chat conversations and e-mails to our support, unless they belong to an order whose documents we are required to keep.
- Marketing profile
- Your profile at the service we send our e-mails with, and the record of what was sent to you.
What we have to keep, and for how long
Some things cannot be deleted on request, because the law requires us to keep them:
- Orders, invoices and payments
- Seven years from the end of the financial year the document belongs to, as the Estonian Accounting Act requires. They are kept for accounting and tax purposes only — never for marketing, and never to contact you again.
- Returns and warranty claims
- Kept with the order they belong to and for the same period, because they are part of its accounting record.
- Record of consents
- Which consents you gave and withdrew, and when. It is the evidence that we processed your data lawfully, and it holds nothing beyond that.
- This deletion request
- The confirmation code, the kind of request, its status and its dates are kept for 180 days as proof that we handled it. The e-mail address is erased from the record seven days after the request is finished.
Once the period is over, these records are deleted or stripped of everything that identifies you. We always tell you what was deleted and what had to be kept.
Deleting some data without closing your account
You do not have to lose the account to stop a particular use of your data:
- Disconnect Facebook — the link and the Facebook user ID go, the account and your order history stay. Use the form on this page.
- Unsubscribe from the newsletter and from the notifications of the app in your account settings, or with the link at the bottom of any e-mail we send.
- Have the data held about you anonymised instead of deleted, in the privacy settings of your account.
- Download a copy of the personal data we hold about you, in the same place.
How long it takes
We answer every request within 30 days, as the GDPR requires; in practice it is usually a few working days. If we need something from you to be sure which account it is, we write to the address the account is registered to.
If you signed in with Facebook
When you choose "Sign in with Facebook", our shop asks Facebook for the following permissions:
- public_profile
From those permissions we receive and store only the following. We do not receive your Facebook password, your friend list, your posts, your photos or your messages, and we never post anything on your behalf.
- Facebook user ID
- The identifier Facebook gives your profile for our shop. It is what lets us recognise you the next time you sign in with Facebook.
- E-mail address
- Used to find your existing customer account, or to create one if you do not have one yet. It becomes the address you sign in with.
- First name and last name
- Used to fill in your customer account when it is created.
We do not store your Facebook access token. It exists only for the moment the sign-in takes place and is discarded as soon as it has been used.
Removing our app on Facebook
You can also revoke our access from the Facebook side, which stops Facebook from sending us anything further:
- Open Facebook and go to Settings.
- Choose "Apps and Websites".
- Find Vitateka in the list and select it.
- Choose "Remove".
Facebook then notifies us, and we delete the data we received about you through Facebook Login automatically. Removing the app does not delete your customer account here — use the form for that.
Checking the status of a request
Every request gets a confirmation code. You can check what is happening to it at any time: https://vitateka.ee/en/privacy/data-deletion/status
Who to contact
Vitateka OÜ
Mõisa tee 5, Kostivere alevik, Harjumaa, Eesti, 74204
[email protected]
Vitateka OÜ is the developer of the Vitateka app for Android (ee.vitateka.shop) and the controller of the personal data described on this page.
Our general privacy policy: Privacy policy
