OÜ "Runikon Retail" (hereinafter “company” or “we”) respects your privacy and is committed to protect it through compliance with this privacy policy (hereinafter “Privacy policy”). In this Privacy policy, we will inform you about how we process your personal data. We commit ourselves to be transparent with you by providing clear information about what personal data we process, about the purpose of the processing, the retention period of the personal data as well as the legal basis for the processing and other information that we are required to provide pursuant to applicable legislation.
Topics:
1. What personal data do we process and why?
1.1. Video surveillance
1.2. Photos and/or videos from pick up point public events/activities
1.3. Public relations
1.4. Agreements with natural persons, including received/issued invoices
1.5. Business partners’ or potential business partners’ employees’/representatives’ personal data
1.6. Games and/or contests
1.7. IKEA home planning program account
1.8. IKEA BUSINESS
2. To whom we disclose the personal data?    
3. Protection of personal data
4. Your rights 
5. Changes in our privacy policy
6. Contact information

1. What personal data do we process and why?
The categories of personal data that we process about you, purposes and legal basis for the processing are the following:
1.1 Video surveillance
Categories of personal data Legal basis for the processing
Image and other personal data falling into the camera’s field. Our legitimate interests to ensure the safety of our property, information, employees and third parties, to prevent, control and disclose incidents, unlawful acts and to ensure an effective investigation in case of such acts.
We process your personal data with the purpose to ensure the safety of our property, information, employees and third parties, to prevent, control and disclose incidents, unlawful acts and to ensure an effective investigation in case of such acts.
You have no obligation to provide personal data and we have no aim to identify you unless it is necessary for specific purposes. Nevertheless, due to the nature of video surveillance, we cannot guarantee your ability to perform your tasks or that you will be able to receive our services without being subject to video surveillance.
The video surveillance of indoor and outdoor territories is continuous 24/7. 
Video surveillance records shall be stored no longer than for 25 days, unless these records contain information that is necessary as evidence in a civil, administrative or criminal case or for an investigation. In such cases, the records may be stored as long as they are necessary for the aforementioned purposes and will be immediately destroyed when they become unnecessary.
We may transfer your personal data to law enforcement authorities, state and local government institutions. Our data processors, e.g. companies, who provide system maintenance services, administration, support services to us have access to video recordings.
If you would like to access data collected about you by using cameras you can contact us by the contacts provided in Paragraph 6.
1.2 Photos and/or videos from pick up point’s public events/activities
Categories of personal data Legal basis for the processing
•    Image (picture or video in digital format)
•    If necessary for specific event: name, surname, e-mail or phone.
Our legitimate interest to organise events/activities and communicate information about our company and its activities.
We process your personal data in order to communicate information about our company and its activities and to give you an opportunity to participate in our events and enjoy the results or the output of such events.
We obtain information about you, when you:
1. participate in events or other activities of our pick up point (e.g. pick up point opening, movies and etc.);
2. participate in our contests;
3. take photos with Santa during the Christmas time and get the free photos;
Events are open for everyone, but the participation is not a mandatory. You are free to choose whether you participate or not. If you want to avoid the possibility of capturing your image, you are free to not attend the public events organised by us, or to contact us and ask to exclude your image from the communication materials. When you participate in the events, you should be aware that your image could be captured and used to communicate our company's activities.
Your name, surname, phone number or e-mail are only collected when we want to prepare a participant’s list of an event or inform you about the possibility to get/take away the result of our collaboration.
Your name, surname, phone number or e-mail will be stored until the end of the event for that they were collected. Your image (picture or video) from events/activities will be stored for 10 (ten) years starting from the actual event date.
We transfer your personal data to our partners who provide us photo or video  services, printing services, to advertising agencies, Inter IKEA Systems B.V., data processors, e.g. that provide us IT maintenance services etc.
1.3. Public relations
Categories of personal data Legal basis for the processing
•    Name
•    Surname
•    Company (media)
•    E-mail
•    Phone
•    Address
•    Social media (Messenger, Viber, WhatsApp etc.) account or other communication channel’s (like Skype) account
•    In specific cases (like media trips, events with catering) to ensure your health and safety, we may ask to provide additional data, for example, for your preferences for food.
We are processing personal data based on your consent or on our legitimate interest of maintaining public relations.
We process your personal data for the purposes of distributing relevant information to the general public or specific groups. If you would like to receive the corporate news of our company, we will collect certain information about you. We use the collected data in order to send you our corporate news like press releases by e-mail, event invitations by e-mail (or printed ones to the indicated address) and communicate on phone, through social media (Messenger, Viber, WhatsApp, etc.) or via other communication channels (like Skype) in urgent cases, in order to provide you important information of our company that is relevant for the society.
We obtain information about you when you provide personal data to us by expressing your wish via e-mail  in order to receive company’s news, or agree to receive news when attending our events or communicate directly with our Marketing or Public Relations representatives or from public resources (e.g. contact list of the media channel).
You have no obligation to provide all personal data, you may provide only that which you prefer to use for communicating with us (for example, you may provide only company’s name and e-mail). If you do not provide the necessary data, you will not receive our news. If you find the information we send irrelevant, you can unsubscribe by expressing your wish via e-mail to company’s Public Relations/Marketing employees. 
Your personal data will be stored until you unsubscribe or otherwise request us to delete your data, until we find out that the recipient is no accessible no more (e.g. receive automatic notification that the contacted person is not working there anymore or that such e-mail address has ceased to exist) or for 5 (five) years from the collection . The list of media participants in an event will be stored for 2 (two) years from the end of this event, while the list of others participating in the event – 1 (one) month from the end of the event. If we have collected additional data, e.g., preferences for food, such data will be stored for no longer than until the end of the event.
The personal data is disclosed to companies that provide services to us, i.e. in some cases we may transfer your personal data to the company’s Public Relations agency to share information on our behalf, to data processors, e.g. who provide us IT maintenance services etc. In case of a global event communication, if we have your consent, we may transfer your personal data to Inter IKEA Holding B.V. etc.
1.4. Agreements with natural persons, including received/issued invoices
1.4.1. Agreements with natural persons
Categories of personal data Legal basis for the processing
•    Name
•    Surname
•    Bank account
•    Date of birth or personal ID number
•    VAT registration number (if registered as VAT payer)
•    Commercial register number
•    Address
•    Contacts – email address and/or phone number.
We process personal data in order to perform a contract with you or to enter into contract with you, as well as for the compliance with the legal obligations to which we are a subject.
However, if we retain your personal data in order to protect our legal rights, e.g. in legal dispute, such processing of personal data is based on legitimate interest to protect our rights.
We process your personal data for the purposes of concluding a contract with you, of performing this contract, monitoring its execution, processing payments under concluded contracts and deal with complaints related with the conclusion, execution and/or termination of a contract.
In addition, we process your personal data in order to ensure a correct execution of our tax obligations, i.e. to ensure that we have the personal data that is necessary for a proper execution of our legal obligations: for calculating taxes and for declaring to tax authorities’ information about the services we have obtained from you and the payments to you.
We process your personal data in order to recover debts and/or other payables if necessary and fulfil our legitimate interest when bringing, presenting and defending legal claims.
We obtain information about you when you submit it to us by concluding a contract and/or providing services (if not contracted).
You have to provide us your name, surname, date of birth (or personal identification number), VAT registration number (if registered as a VAT payer), address, commercial register  number and contacts. If you do not provide the mandatory information, we will not be able to conclude an agreement with you and not be able to buy services provided by you.
Your personal data will be stored for 7 (seven) years as of the end of the financial year when the agreement expired . If the agreement  provides for a warranty period that exceeds the aforementioned storage term, all personal data related to the agreement will be retained 7 (seven) years after the expiry of warranty period. If the contract is necessary in a legal proceeding that extends beyond the above-mentioned retention period, all personal data relating to the contract concluded will be kept for 1 (one) year after the final decision of the relevant institution has been taken. If you have provided us services, but there was no contract concluded with you, your personal data will be stored for 7  (seven) years as of the end of the financial year when the service was provided and the accounting document was issued.
We transfer your personal data to banks, state institutions (mainly tax authorities), auditors,  legal, financial advisers, debt collection companies, data processors, e.g. IT maintenance companies etc.
1.4.2. Invoices to/from natural persons
Categories of personal data Legal basis for the processing
•    Name
•    Surname
•    Bank account
•    VAT registration number (if registered as a VAT payer)
•    Commercial register number
•    Address
•    Contacts – email address and/or phone number.
We process your personal data for the compliance with legal obligations to which we are a subject.
However, if we retain your personal data in order to protect our legal rights, e.g. to recover of debts and/or other payables, such processing of personal data is based on the legitimate interest to protect our rights.
We process your personal data for the purposes of issuing/receiving invoices properly i.e. according to legal requirements and also in order to ensure that the information which needs to be provided to tax authorities is correct. We process your personal data in order to recover debts and/or other payables if necessary and fulfil our legitimate interest when bringing, presenting and defending legal claims.
We obtain information about you when you submit it to us in order to issue an invoice for the goods and services that you have purchased or when you are provide such invoice.
When we issue an invoice, you have provide your name, surname, VAT registration number (if registered as a VAT payer), address, commercial register  number. If you do not provide the mandatory information, we will not be able to issue an invoice.
Your personal data will be stored for 7 (seven) years as of the end of the financial year when the invoice was issued/received.
We transfer your personal data to banks, state institutions (mainly tax authorities), auditors, legal, financial advisers, debt collection companies, data processors, e.g. IT maintenance companies etc.
1.5. Business partners’ or potential business partners’ employees’/representatives’ personal data
Categories of personal data Legal basis for the processing
•    Name
•    Surname
•    E-mail
•    Telephone
•    Position
Legitimate interests to conclude and execute of agreements with business partners and to build new business relationships with potential business partners.
We process your, as a business partner’s employee’s/representative’s, personal data in order to sign agreements, execute them and/or to contact you about various questions about agreement fulfilment.
We process your (as a potential business partner’s employee’s/representative’s) personal data in order to build new business relationships (e.g. when receiving commercial offers in our contests).
We obtain your personal data from you or from our business partner or a potential business partner.
Your (as a business partner’s employee’s/representative’s) personal data will be stored 7 (seven) years as of the end of the financial year when the agreement expired. If the agreement  provides for a warranty period that exceeds the aforementioned storage term specified above, then all personal data relating to the agreement  will be retained 7 (seven) years after the expiry of warranty period. If the contract is necessary in legal proceedings that extend beyond the above-mentioned retention period, all personal data relating to the contract concluded will be kept for 1 (one) year after the final decision of the relevant institution has been taken.
Your (as a potential business partner’s employee’s/representative’s) personal data will be stored until the end of the contest.
We can disclose your personal data to auditors, state institutions (mainly tax authorities), finance and law consultants, data processors, e.g. IT maintenance companies etc.
1.6. Games and/or contests
Personal data categories Legal basis for data processing
Depending on the game and/or a contest, there may be one or several of them:
•    Name
•    Surname
•    Social network user name
•    Telephone number
•    E-mail
•    IKEA FAMILY card number
•    Receipt date
•    Receipt number
•    Other contest and/or game-related data (such as a photograph, etc.)
•    Address (if the prize or any other gift is delivered home)
Your consent.
In case of a complaint received regarding the game and/or contest, the processing of personal data shall be based on legitimate interest to protect our rights.
We process your personal data for the purpose of organizing, executing and administering games and/ or contests, determining and announcing the winner, presenting prizes and / or other gifts. Having received a complaint regarding a game and / or a contest, personal data shall be processed in order to file, execute or defend legal claims.
Participation in a game and / or a contest is optional, but if you agree to participate, you shall submit your personal data requested in the game and / or the contest. Otherwise, you will not be able to participate in the game and / or the contest. Should you fail to provide the requested mandatory information, we will not be able to ensure accounting law requirements, also correct execution of our tax obligations, thus we may refuse to present you with a prize or another gift.
We receive information about you when you agree to participate in a game and / or a contest by completing a registration form or when you voluntarily agree to publish your personal data in comments, messages, posts, etc. in social networks. You have the right to withdraw your consent to collecting and processing your personal data at any time without affecting the lawfulness of collection and processing of the data till the withdrawal of the consent. Having withdrawn his consent, a participant in a contest and/or a game shall be removed from the list of participants and shall no longer participate therein. By participating in a contest and / or a game, you also consent to the publication of the receipt number and the date, or the username used in social networks on the contest and / or game website or in social networks in case of winning.
We may also use an automated decision-making programme to manage the registration for a game and / or a contest or to determine the winners of the game and / or the contest. If you do not want to be subject to automatic decision making, you will not be able to participate in the game and / or the contest.
By submitting personal data, you confirm that the personal data are accurate and correct, also that you are at least 18 years old. Having detected inaccuracies, please correct them immediately.
Personal data of game and/or contest participants shall be stored till the day the winner is determined or no longer than 5 working days after the deadline for filing a complaint regarding the game and/ or the contest. Personal data may be stored longer if a complaint has been received regarding a game and / or a contest. In such a case, personal data shall be stored until the complaint has been resolved.
We transfer your personal data to couriers, if a prize and / or another gift is delivered to the place of residence, or to data processors, such as a IT maintenance companies. We allow you to upload your content, for example photos, in some games and / or contests. In such a case, information that you provided or published shall become public information.
1.7. IKEA home planning program account
Categories of personal data Legal basis for the processing



•    E-mail
•    Shopping list
•    Planning drawings
We process personal data in order to perform a contract with you or to enter into contract with you
We process your personal data in order to allow you to create IKEA home planning program  account where you can use our interior design tools and furnish your home with IKEA furniture as well as to save your planning drawings and shopping list in your account. Creating this account is completely voluntary.
If you would like create IKEA home planning program account, you must provide personal data. If you do not, you will not be able to create an account.
By providing your personal data you confirm that your personal data is accurate and correct and that you are not younger than 18 year old. If you notice any inaccuracies, you should immediately correct your data.
Your account data will be stored for 24 months. Personal data may be disclosed to Inter IKEA Systems B.V.  group companies as well as to companies that provide us with services, for example IT system maintenance services etc.
1.8. IKEA BUSINESS
Categories of personal data Legal basis for the processing
•    Name
•    Surname
•    Contacts: e-mail and/or phone number 
•    Interaction of newsletter (information if a newsletter was read, when it was read, how many times it has been read (or opened), if it has forwarded, what operating system was used, which email server, including its location)
Legitimate interests mentioned below.
Consent for direct marketing (if the recipient is IKEA BUSINESS client (natural person) or IKEA BUSINESS client’s employee/representative).
To maintain a business relationship, to manage and execute IKEA BUSINESS activities for companies and organisations, to sign agreements, execute it, and/or to contact for various questions about agreement fulfilment with IKEA BUSINESS clients, we have to process IKEA BUSINESS clients’ (which may also be natural persons - entrepreneurs), their employees’/representatives’, personal data.
Also, with IKEA BUSINESS client’s (if she/he is natural person), or IKEA BUSINESS client (if it is company) employees’/representatives’ prior free consent we are providing for IKEA BUSINESS client (if she/he is natural person) or IKEA BUSINESS client (if it is company) employees’/representatives’ information by e-mail about our products, services, offers & promotions for companies and organisations, also to better understand if information we send is relevant we track interaction of newsletter (information if a newsletter was read, when it was read, how many times it has been read (or opened), if it has forwarded, what operating system was used, which email server, including its location). In such case personal data will be stored as long as direct marketing is unsubscribed, but not more than 12 months after the last interaction with the newsletter or phone call.
IKEA BUSINESS clients, their employees/representatives, personal data will be stored 7 (seven) years as of the end of the financial year when the agreement expired, if the agreement  was signed. If the agreement  provides for a warranty period that exceeds the storage term specified above, then all personal data relating to the agreement  will be retained 7 (seven) years after the expiry of warranty period. If the contract is necessary in a legal proceeding that extends beyond the above mentioned retention period, then all personal data relating to the contract concluded will be kept for one year after the final decision of the relevant institution has been taken. If the contract was not signed IKEA BUSINESS clients’, their employees’/representatives’ personal data will not be stored. 
We can disclose your personal data to auditors, finance and law consultants, the companies which are providing home delivery, furniture assembling and installation services, data processors, e.g. company which system we are using for sending newsletters, IT maintenance companies and etc.

2. To whom we disclose personal data?
We disclose your personal data to:
a)    Companies we work with
Personal data is disclosed to companies that provide services to us and are mentioned in each section. Also to UAB „Felit“ (IKEA Lithuania) and SIA PAUL MASON PROPERTIES (IKEA Latvia) which provides support, maintenance, administration services. These companies are required to adequately safeguard your personal data and to not use this data for any unauthorised purposes, and to ensure that its suppliers do the same.
b)    State and local government institutions, other persons performing functions assigned to them by law
We transfer your personal data to state and local government institutions and other persons performing functions assigned to them by law upon their request or in order to meet our legitimate interest in establishing, claiming and defending legal claims.

3. Protection of personal data
We use a variety of technical and organisational security measures to protect your personal data, e.g. your personal data are stored on systems behind secure networks and is only accessible to a limited number of persons with special access rights to such systems, etc.

4. Your rights
Your rights are:
a) the right to access – you have the right obtain a confirmation from us as to whether or not we process your personal data and, when we do, access the personal data. That’s why we inform you in advance about our processing activities via this privacy policy. If you have any questions, or would you like to learn more about what information we process from you, you are always welcome to contact us and we will provide you with further information;
b) the right to rectification – you have the right to request a correction of any inaccurate personal data;
c) the right to erase – under some circumstances you have the right to the erasure of your personal data, if you believe there’s no longer any need for us to keep it. Or, if you previously have given your permission, you can just decide to withdraw it. This does not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation or for the establishment, exercise or defence of legal claims;
d) the right to receive yourself or transfer your personal data to another company in certain circumstances (known as the right to data portability). This applies when data processing is based on you consent or on a contract and whenever processing is carried out by automated means;
e) the right to restrict - in some circumstances you have the right to restrict the processing of your personal data. This means we will continue to store your information, but we’ll temporarily stop any other processing. Why would you want to do this? For example if you’ve asked us to fix incorrect information. In this situation you may want us to stop processing until the information is correct;
f) the right to object - you have the right to object to our processing. This applies when data processing is based on legitimate interests pursued by us or by a third party. You can do this when you believe that your personal interest outweighs ours;
g) the right to object - you have the right to object to our processing of your personal data for direct marketing purposes;
h) the right to withdraw your consent to the processing at any time.
In order to carry out the aforementioned rights please provide written request to us or to the Data protection officer (contacts mentioned below).
You also have the right to complain to the Estonian data protection  inspectorate (https://www.aki.ee), 39 Tatari st., 10134, Tallinn, Estonia, tel. +372 627 4135, e-mail: info@aki.ee, if you believe that the processing of personal data by us does not comply with the applicable legislation.

5. Changes in our privacy policy
We keep our Privacy policy under regular review. This privacy policy was created on 23rd of August, 2022.

6. Contact information
If you have any questions about the processing of your personal data, any requests, or if you would like to give us feedback, please contact:
OÜ Runikon Retail, registration number 14611049, legal address:  Kangrumetsa tee 1; Kurna küla, Rae vald, Harju maakond, 75307; Tallinn Republic of Estonia, phone number: +372 330 4000, email address: info@IKEA.ee.

Data protection officer:  dpo@IKEA.ee.
You also can contact our Data protection officer by sending a letter to us at the above-mentioned address and addressing it to the Data protection officer.



X

Back to stock notifications

Be the first to know when [itemName] is available again:

Alert has been set correctly

You will receive an email when [itemName] become available again