Makseturvalisus

Kellad.ee e-poes toimub maksmine võimalikult turvalisel moel – kasutusel on SSL-krüpteerimine ja PCI-sertifitseeritud Epay süsteem.

SSL-krüpteerimine

Sooritades ostu Kellad.ee e-poes, olete kaitstud maksekaardi informatsiooni kuritarvitamise eest: meie makseleheküljel kasutatakse SSL-krüpteerimist, mis tähendab, et kaardi informatsiooni saadetakse krüpteeritud kujul turvalise ühenduse abil. SSL-krüpteerimine on turvalisim info krüpteerimise viis ja seda kasutavad kõik suuremad makseinstitutsioonid.

Turvalise ühenduse loomise tunnusmärgiks on see, et brauseri aadressiribale ilmub tabaluku ikoon ja "http://" muutub "https://"-ks, kus lisanduv s-täht tähendab "secure" ehk "turvaline" (tabaluku ikoon ja "https://" on ainult sel leheküljel, kus maksmist sooritatakse). Kõik see on seadusejärgne nõudmine kõigile e-poodidele, mistõttu tuleb alati kontrollida nende tunnusmärkide olemasolu internetis maksmisel.

Epay

Maksekaardiga maksete sooritamiseks kasutame Taani PSP (Payment Service Provider) ettevõtte Epay teenuseid, mis on PCI-sertifitseeritud VISA/MasterCard'i poolt, mis tähendab, et seejuures on täidetud üle 200 turvalisustingimuse.

Eksternfirma FortConsult sertifitseerib makseteenuseid pakkuvaid firmasid, sealhulgas vaatavad nad regulaarselt läbi Epay süsteemi, eesmärgiga tuvastada turvalisuspuudujääke. Lisaks sellele töötatakse igal aastal intensiivselt selle kallal, et proovida sisse tungida Epay süsteemi, leidmaks kõiki võimalikke turvalisuse lekkekohti. Koostöö FortConsult'iga kindlustab seega ülimalt kõrge turvalisustaseme, mida uuendatakse regulaarselt – Epay'ga kaardiga maksmisel võib ennast alati turvaliselt tunda.

Küpsise nimi	Küpsise tüüp	Küpsise kirjeldus
SIDCC	Turundus	This cookie carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.
APISID	Turundus	This DoubleClick cookie is generally set through the site by advertising partners, and used by them to build a profile of the website visitor's interests and show relevant ads on other sites. This cookie works by uniquely identifying your browser and device.
DSID, FLC, AID, TAID, and exchange_uid,IDE,ANID,NID,OTZ	Turundus	Google uses one or more cookies for advertising they serve across the web. One of the main advertising cookies on non-Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. Another is stored in google.com and is called ANID. https://policies.google.com/technologies/types?hl=en
datr, reg_fb_gate, reg_fb_ref and reg_fb_ext, wd, c_user, lu, sct, xs, x-referer, presence, p, locale, lsd, _e_*, fr, sub, etc	Turundus	Facebook advertiser cookies are used for reporting on social campaigns, troubleshooting campaign set up and building aggregated pools of audiences for targeting based on behaviour trends on and off the nouryon campaign sites.
amz_auth_err	Vajalik	Used if Enable Login with Amazon is enabled
amz_auth_logout	Vajalik	Used if Enable Login with Amazon is enabled
form_key	Vajalik	A security measure that appends a random string to all form submissions to protect the data from Cross-Site Request Forgery (CSRF).
guest-view	Vajalik	Stores the Order ID that guest shoppers use to retrieve their order status. Guest orders view. Used in "Orders and Returns" widgets.
login_redirect	Vajalik	Preserves the destination page the customer was loading before being directed to log in. Used in mini cart for logged in customers if the Display Shopping Cart Sidebar configuration option is set to Yes.
mage-cache-sessid	Vajalik	The value of this cookie triggers the cleanup of local cache storage. When the cookie is removed by the backend application, the Admin cleans up local storage, and sets the cookie value to true.
mage-cache-storage	Vajalik	Local storage of visitor-specific content that enables ecommerce functions.
mage-cache-storage-section-invalidation	Vajalik	Forces local storage of specific content sections that should be invalidated.
mage-messages	Vajalik	Tracks error messages and other notifications that are shown to the user, such as the cookie consent message, and various error messages. The message is deleted from the cookie after it is shown to the shopper.
mage-translation-storage	Vajalik	Stores translated content when requested by the shopper. Used when Translation Strategy is configured as “Dictionary (Translation on Storefront side)”
mage-translation-file-version	Vajalik	Tracks the version of translations in local storage. Used when Translation Strategy is configured as Dictionary (Translation on Storefront side).
persistent_shopping_cart	Vajalik	Stores the key (ID) of persistent cart to make it possible to restore the cart for an anonymous shopper.
product_data_storage	Vajalik	Stores configuration for product data related to Recently Viewed / Compared Products.
recently_compared_product	Vajalik	Stores product IDs of recently compared products.
recently_compared_product_previous	Vajalik	Stores product IDs of previously compared products for easy navigation.
recently_viewed_product	Vajalik	Stores product IDs of recently viewed products for easy navigation.
recently_viewed_product_previous	Vajalik	Stores product IDs of recently previously viewed products for easy navigation.
section_data_ids	Vajalik	Stores customer-specific information related to shopper-initiated actions such as display wish list, checkout information, etc.
store	Vajalik	Tracks the specific store view / locale selected by the shopper.
searchReport-log	Vajalik	used to collect log information about searching
stf	Vajalik	Records the time messages are sent by the SendFriend (Email a Friend) module.
X-Magento-Vary	Vajalik	Configuration setting that improves performance when using Varnish static content caching.
__Secure-3PAPISID, __Secure-HSID, NID, HSID, __Secure-SSID, SID, APISID, __Secure-APISID, SSID, SAPISID, __Secure-3PSID, __Secure-HSID, ANID, __Secure-3PAPISID, __Secure-APISID, HSID, __Secure-3PSID, SAPISID, 1P_JAR, __Secure-SSID, SID, SIDCC, NID, APISID,SSID, _ga, GoogleAdServingTest	Turundus	Google Analitics Cookies: Login Functionality, Analytics and Performance, https://policies.google.com/technologies/ads
Temporary and persistent cookies (abc_switch_cross_paypal, AKDC, Apache, c, cookie_check, feel_cookie, flow_back_cookie, JSESSIONID, LANG, login_email, navcmd, s_sess, s_vi, SEGM, ts, X-PP-K, x-pp-p, x-pp-s, X-PP-SILOVER, cookies with random names, etc) etc	Vajalik	Browsing session management,Web analytics,Technical,Authentication,User preferences,Tracking,Advertising,Location,Security,Transfer data outside the EU
gdpr_cookie	Eelistused	Set allowed cookies list
gdpr_show_popup	Eelistused	Check if cookie popup was shown
NID	Eelistused	The NID cookie contains a unique ID Google uses to remember your preferences and other information. For more information: https://policies.google.com/technologies/types?hl=en
Temporary and persistent cookies (abc_switch_cross_paypal, AKDC, Apache, c, cookie_check, feel_cookie, flow_back_cookie, JSESSIONID, LANG, login_email, navcmd, s_sess, s_vi, SEGM, ts, X-PP-K, x-pp-p, x-pp-s, X-PP-SILOVER, cookies with random names, etc)	Eelistused	Protected users data against unauthorized access. For more information: https://policies.google.com/technologies/types?hl=en ,Paypal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) / Paypal, Inc
gtm_debug, gtm_auth, gtm_preview	Statistika	Google Tag Manager. These cookies collect analytical data about site usage. For more information: https://policies.google.com/technologies/types?hl=en
__utma, __utmb, __utmc, __utmt, __utmv, __utmz, _ga, _gid, _gat_..account_id, etc	Statistika	Google Analitics. These cookies let us know how you use our website and how you found our website. For more information: https://policies.google.com/technologies/types?hl=en
private_content_version	Vajalik	Private content, which is stored in the browser local storage, https://devdocs.magento.com/guides/v2.3/extension-dev-guide/cache/page-caching/private-content.html
SEARCH_SAMESITE	Statistika	This cookie is used to prevent the browser from sending this cookie along with cross-site requests.
PHPSESSID	Vajalik	PHP session cookie associated with embedded content from this domain.
fitler_active	Eelistused	Remember selected filter state (expanded/collapsed)
__kla_id,KL_FORMS_MODAL, _hp2_ses_props,_hp2_id	Statistika	Klaviyo Tracking Cookies https://help.klaviyo.com/hc/en-us/articles/360034666712-Cookies-in-Klaviyo
visitor,hubspotutk,intercom-session-qgotccxx, _fbp,_gid, _delighted_web, intercom-id-qgotccxx, _hjid,__hssc, __hssrc, _lfa, hubspotutk, _ga	Statistika	Clerk.io cookies, see https://clerk.io/privacy
_sp_id,_sp_ses	Statistika	It is used to persist information about a user’s activity on the domain between sessions.
pixel	Statistika	Some data points that can be collected include: Which pages they view, Which ads they click on, The operating system they use, The type of device they use, The screen resolution they use, What time they visited, Activities during a session, Their IP addresses
__gads, DSID, _fbp, IDE, __Secure-3PAPISID, SAPISID,CONSENT, __Secure-APISID, NID, SID, 1P_JAR,__Secure-3PSID, __Secure-SSID, ANID, __SecureHSID, HSID, SEARCH_SAMESITE, APISID, SSID, AID,SIDCC, UULE, DV	Statistika	These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
STUID	Statistika	This cookie identify unique browsing session.
STVID	Statistika	This cookie identify unique returning visitor.