Privacy Policy
1. General Provisions
1.1. This Privacy Policy governs the principles governing the collection, processing and storage of personal data. Personal data are collected, processed and stored by the main processor of personal data Linen4me (hereinafter referred to as the data processor).
1.2. For the purposes of the Privacy Policy, the data subject is the client or other natural person whose personal data is processed by the data processor.
1.3. For the purposes of the Privacy Policy, a customer is anyone who purchases goods or services from the website of the data controller.
1.4. The data processor follows the principles of data processing provided by law, including the data processor processing personal data in a lawful, fair and secure manner. The data processor can confirm that the personal data have been processed in accordance with the law.
2. Collection, processing and storage of personal data.
2.1. The personal data that is collected, processed and stored by the data controller is collected electronically, mainly via the website and email.
2.2. By providing his personal data, the data subject grants the data controller the right to collect, organize, use and manage personal data for the purposes defined in the privacy policy, which the data subject shares directly or indirectly with the data controller when purchasing goods or services on the website.
2.3. The data subject is responsible for ensuring the accuracy, correctness and completeness of the data provided to them. Deliberately providing false information is considered a violation of our privacy policy. The data subject is obliged to immediately notify the data processor of any changes in the submitted data.
2.4. The data processor is not responsible for any damage caused to the data subject or third parties as a result of the data subject providing false data.
3.1. The data processor may process the following personal data of the data subject:
3.1.1. Name and surname;
3.1.2. Date of Birth;
3.1.3. Telephone number;
3.1.4. E-mail address;
3.1.5. Delivery address;
3.1.6. Current account number;
3.1.7. Payment card details;
3.2. In addition to the above, the data processor has the right to collect customer data that is available in public registers.
3.3. The legal basis for the processing of personal data is § 6 (1) (a), (b), (c) and (f) GDPR:
(a) the data subject has given his consent to the processing of his personal data for one or more specific purposes;
(b) the processing of personal data is necessary to fulfill a contract concluded with the participation of the data subject or to take pre-contractual measures at the request of the data subject;
(c) the processing of personal data is necessary to fulfill a legal obligation of the controller;
(f) the processing of personal data is necessary in the legitimate interests of the controller or a third party, unless such interest outweighs the interests of the data subject or the fundamental rights and freedoms in respect of which the personal data should be protected, in particular if the data subject is a child.
3.4. Processing of personal data in accordance with the purpose of processing:
3.4.1. The purpose of processing is safety and security
The maximum storage period for personal data is in accordance with the conditions established by law.
3.4.2. Purpose of processing - order processing
Personal data will be deleted after the customer's online store account is closed, unless such data need to be retained for recording or resolving consumer disputes.
If a purchase in an online store was made without a customer account, the purchase history will be stored for three years.
3.4.3. The purpose of processing is to ensure the operation of the services of the online store
The maximum storage period for personal data is up to three years.
3.4.4. The purpose of the processing is customer management
After the customer's account in the e-shop is closed, personal data will be deleted.
3.4.5. The purpose of processing is financial activity, accounting.
The maximum storage period for personal data is in accordance with the conditions established by law for seven years.
3.4.6. The purpose of the processing is marketing
After the customer's account in the e-shop is closed, personal data will be deleted.
If a purchase in an online store was made without a customer account, the purchase history will be stored for three years.
In the event of disputes related to payments and consumer disputes, personal data will be stored until the claim is satisfied or until the expiration of the limitation period (three years).
3.5. The data controller has the right to transfer personal data of customers to third parties, such as authorized data processors, accountants, transport and courier companies, companies providing data transmission services. The data processor is the controller of personal data. The data processor transfers the personal data necessary for making payments of the authorized processor Maksekeskus AS.
We use Shopify to power our online store - you can learn more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site. You can learn more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of using Google Analytics here: https://tools.google.com/dlpage/gaoptout.
3.6. When processing and storing the personal data of the data subject, the processor takes organizational and technical measures to ensure the protection of personal data from accidental or illegal destruction, alteration, disclosure and any other illegal processing.
3.7. The data controller must store the data of the data subjects, depending on the purpose of the processing, but for no longer than seven years.
4. Rights of the data subject
4.1. The data subject has the right to access and verify his personal data.
4.2. The data subject has the right to receive information about the processing of his personal data.
4.3. The data subject has the right to supplement or correct inaccurate data.
4.4. If the data processor processes the personal data of the data subject on the basis of the consent of the data subject, the data subject has the right to revoke the consent at any time.
4.5. The data subject may contact the customer support of the online store at info@linen4me.com to exercise his rights.
4.6. In order to protect his rights, the data subject may lodge a complaint with the Data Protection Inspectorate.
5. Final provisions
5.1. These data protection conditions have been drawn up in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC. law and legislation of the Republic of Estonia and the European Union.
5.2. The data processor has the right to change the data protection conditions, in part or in full, by notifying data subjects of the changes through the Linen4mehandmade.com website.
ADDITIONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone and some of the cookies installed on your device. In addition, when you browse the Site, we collect information about the individual web pages or products you browse, which websites or search queries have directed you to the Site, and information about how you interact with the Site. We call this automatically collected information "Device Information".
We collect device information using the following technologies:
- "Cookies" are data files that are placed on your device or computer and often contain an anonymous unique identifier. For more information on cookies and how to disable cookies, visit http://www.allaboutcookies.org.
- "Log files" track activity on the Site and collect data, including your IP address, browser type, internet service provider, referral / exit pages, and date / time stamps.
- "Web beacons", "tags" and "pixels" are electronic files used to record information about how you browse the Site.
BEHAVIORAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing messages that we believe may be of interest to you. For more information on how targeted advertising works, you can visit the Network Advertising Initiative (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
Turn links on and off from the following services.
GENERAL REFERENCES INCLUDE:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
In addition, you can opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at http://optout.aboutads.info/.
DO NOT TRACK
Please note that we do not change the way our Site collects and uses data when we see the Do Not Track sign.
CHANGES
We may update this privacy policy from time to time to reflect, for example, changes in our practice or for other operational, legal or regulatory reasons.