Privacy Policy

Valid from 1 July 2026

This privacy policy describes how DuoMedics OÜ (Farmatseut) collects, uses, stores and protects personal data. The policy applies, among other cases, where a customer purchases or has purchased goods offered by Farmatseut, uses or has used Farmatseut's services, subscribes to the newsletter or SMS notifications, takes part in campaigns, or communicates or has communicated with Farmatseut in another way.

1 – Definitions

Data subject is a natural person about whom Farmatseut holds information or whose identity is identifiable on the basis of the data collected.

Personal data is any information relating to an identified or identifiable natural person.

Customer is a person who uses, has used or wishes to use Farmatseut's services or to purchase goods offered by Farmatseut.

Customer data is all information about a customer or their representative that has become known to Farmatseut.

Processing is any operation performed on personal data, including collection, recording, storage, organisation, use, transfer, erasure or destruction.

The controller is DuoMedics OÜ, registry code 14039224, address Järve 2, 11314 Tallinn, Estonia.

The Data Protection Regulation is Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2 – General principles

Farmatseut processes personal data in accordance with the applicable legislation, including the Data Protection Regulation, the Personal Data Protection Act and this privacy policy.

Farmatseut processes personal data lawfully, fairly and transparently, only for specified purposes and only to the extent necessary to achieve the particular purpose.

Farmatseut applies appropriate technical and organisational security measures to protect personal data against unauthorised access, unlawful processing, disclosure, loss, alteration or destruction.

Farmatseut may use processors who process data on Farmatseut's behalf and on its instructions.

3 – How personal data is collected

Farmatseut collects personal data primarily in the following ways:

data provided by the data subject when placing an order, creating an account, submitting enquiries or using services;
data arising in the course of communication between the customer and Farmatseut, including e-mails, telephone calls, messages and social media contacts;
data arising from the use of the website and the online store, including cookies, analytics, device data and purchasing behaviour;
data obtained from cooperation partners, payment service providers, delivery partners or other service providers;
data made publicly available by the data subject, where its use is lawful.

4 – Legal bases for processing personal data

Farmatseut processes personal data on the following legal bases:

for the performance of a contract or in order to take steps prior to entering into a contract at the customer's request;
for compliance with a legal obligation;
on the basis of the data subject's consent;
on the basis of Farmatseut's legitimate interest, for example to manage the customer relationship, develop services, ensure security or offer similar products to existing customers to the extent permitted by law.

5 – Categories of personal data processed

Farmatseut may process, among others, the following categories of data:

For sending marketing information, Farmatseut primarily uses the following data:

identification data (e.g. name);
contact details (e.g. e-mail address, telephone number, delivery address);
order and purchase data (e.g. products purchased, order history, payment details, delivery method);
customer communication data (e.g. enquiries, feedback, claims, communication history);
technical and web usage data (e.g. IP address, cookie data, device type, usage statistics);
marketing-related data (e.g. preferred language, product categories of interest, subscription to the newsletter or SMS notifications, consent history, participation in campaigns);
customer segment and purchasing behaviour data, used to make offers more relevant.

name;
e-mail address;
telephone number;
preferred language;
purchase history and number of orders;
product categories of interest;
information on whether the data subject has given consent to e-mail and/or SMS marketing and whether they have opted out of it.

6 – Purposes and legal bases for processing personal data

Farmatseut processes personal data mainly in order to:

sell products and provide services, including processing orders, receiving payments, arranging delivery and customer support;
manage customer relationships and respond to enquiries and claims;
comply with accounting, consumer protection and other statutory obligations;
prevent fraud, ensure the security of services and protect Farmatseut's rights;
develop and improve the website, the online store, the product range and the services;
produce statistics and analysis;
run campaigns and prize draws and collect feedback;
send the customer information about products and services and marketing offers in accordance with the law and the customer's preferences.

7 – Direct marketing, newsletters and SMS notifications

Farmatseut may send marketing information to a customer or another data subject by e-mail, SMS or other electronic communication channels.

Farmatseut sends marketing messages on the following bases:

Farmatseut may use profiling in order to make offers and marketing messages more relevant. Profiling may be based, for example, on purchase history, product categories of interest, language preference, order frequency or previous communication. Profiling is not used to make automated decisions that would have a significant legal or similarly significant effect on the data subject.

On subscribing to SMS and e-mail marketing, Farmatseut may send information about, for example:

The data subject may opt out of direct marketing at any time:

Opting out of marketing does not affect the sending of non-marketing messages relating to the service, such as order confirmations, invoices or delivery information.

on the basis of the data subject's consent, where the data subject has subscribed to the newsletter or SMS notifications;
to an existing customer, about Farmatseut's own similar products or services on the basis of the applicable law, where the customer has been given a simple, free-of-charge opportunity to opt out of such messages at the time the data was collected and in every subsequent message.

campaigns and special offers;
new products and product additions;
continuing an order, repeat purchases or products of interest to the customer;
more personalised offers aimed at a customer segment.

by clicking the unsubscribe link in the e-mail;
by using the opt-out link in the SMS;
by writing to info@farmatseut.com.

8 – Transfer of personal data

Farmatseut may transfer personal data to the following recipients:

Farmatseut transfers the personal data necessary for carrying out payments to the processor Maksekeskus AS or to another payment service provider in use.

Farmatseut's employees and authorised persons, to the extent necessary for performing their duties;
payment service providers and payment intermediaries;
delivery, logistics, IT, hosting, analytics and customer support service providers;
technical service providers for e-mail, SMS marketing and customer communication;
accounting, legal and other advisory service providers;
state and supervisory authorities, where the transfer of data arises from law.

9 – Geographical area of processing

As a rule, personal data is processed within the European Union or the European Economic Area. Where a transfer of data outside the EU / EEA is necessary, it takes place only where safeguards compliant with the Data Protection Regulation are used, for example:

an adequacy decision of the European Commission;
the European Commission's Standard Contractual Clauses;
other safeguards permitted under the applicable law.

10 – Retention of personal data

Farmatseut retains personal data only for as long as is necessary to fulfil the purpose of the processing or for as long as required by law.

Different retention periods may arise, among other things, from:

Data processed for marketing purposes is retained until consent is withdrawn or until Farmatseut assesses that the data is no longer necessary for achieving the purpose.

accounting and taxation requirements;
limitation periods for consumer disputes and claims;
the duration of the customer relationship;
the validity of the consent given and the time of opting out.

11 – Rights of the data subject

The data subject has the right to:

If the data subject no longer wishes to receive newsletters or SMS notifications, they may use the unsubscribe links or contact Farmatseut by e-mail.

receive information about the processing of their personal data;
access the data processed about them and request a copy of it;
request the rectification of inaccurate data;
request the erasure of personal data in the cases provided by law;
restrict the processing of data in the cases provided by law;
object to the processing of data, including to direct marketing;
withdraw their consent where the processing is based on consent;
receive the data they have provided in a machine-readable format, where this right applies;
lodge a complaint with the Estonian Data Protection Inspectorate or with a court.

12 – Cookies and analytics

Farmatseut's website uses cookies and similar technologies to ensure the functioning of the website, analyse its use, improve the user experience and support marketing activities. More detailed information about the use of cookies is provided in a separate cookie notice on the website.

12 – Contact details

For questions relating to the processing of personal data, to submit requests or to withdraw consent, Farmatseut can be contacted at:

DuoMedics OÜ Järve 2, 11314 Tallinn, Estonia E-mail: info@farmatseut.com Phone: +372 5151295 Web: www.farmatseut.com

Farmatseut responds to requests without undue delay, but no later than within one month of receiving the request, unless the law permits the deadline to be extended.

13 – Changes to the privacy policy

Farmatseut has the right to update this privacy policy from time to time in order to bring it into line with changes in legislation, services or data processing practices. The latest version is published on the website, and where necessary significant changes are notified via the website or by e-mail.

This document is general information and does not replace individual legal advice.