PRIVACY POLICY

We have assumed an obligation to protect the privacy of our customers and users. Thus, we have drawn up these privacy policy principles, which cover collection, use, disclosure, forwarding, and storing of customer information. Our activities on the Internet are in conformity with all relevant activities and the corresponding legislation of the European Union and acts of the law of the Republic of Estonia.

Definitions
GDPR - Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data; going into effect on May 25, 2018.
Personal Data – any information that directly or indirectly allows identifying a natural person.
Data Subject – directly or indirectly identifiable natural person.
Processing – any operation with Personal Data (including collecting, saving, storing, exchanging, giving access, requesting, handing over, etc.)

General rules
These Principles describe how Prindipood Processes Personal Data.
Within valid laws and regulations Prindipood provides Personal Data confidentiality and implements all technical and organizational measures to protect Personal Data from unsanctioned access, illegal Processing or making public, modifying or destroying;
While Processing Personal Data Prindipood can use Processors, in this case concluding an agreement to provide that Personal Data is processed in accordance with the specified Prindipood goal and with specified Prindipood measures, within valid laws and regulations;
Prindipood website https://prindipood.ee uses cookies, allowing us to offer our clients products according to their interests and needs. Page visitors are informed about the use of cookies and those, who agree, press the “I agree” button. Information on your usage of this site is being shared with Google.
The cookies are stored in clients’ computers or mobile devices and if needed may be deleted.

Storage mode and duration
Photo thumbnails
The system (project editors) works with photo thumbnails. Access to image thumbnails is secured with a 32-character random alphanumeric key (Photo ID). The chance for an unauthorized person to guess this key is negligible. The key can only be accessed by successfully opening the project. Such protection is sufficient to secure this type of data.

Prindipood stores Personal Data only for as long as it is necessary to reach the goal of data gathering:
the client’s registration data are deleted if the client hasn’t made an order in two years’ time and has marked in the profile that he doesn’t want to receive Prindipood news via e-mail;
when processing the orders, the data storage period is linked with the requirements of mutual payment accountancy (Act on Accounting) and the limitation period of the appeal;
Personal Data at Prindipood are classified as “restricted information” and thus are processed (accessed, stored, transmitted, etc.) by using appropriate confidentiality, integrity, and accessibility measures.
Personal Data storage duration is defined
Prindipood stores clients’ data for as long as it is necessary to achieve a specific goal. If the Data Subject cancels the approval to process his Personal Data, then the storage duration of these data is defined by the Act on Accounting and the Code of Administrative offense.

Collection and use of personal data
Personal data is the data that is collected by Prindipood for identification or for contacting an individual. Personal data can be collected with the customer’s consent in the following manners:
by the provision of contact information (including your name, postal address, telephone number, e-mail address) on our website; while using our website, from the customer’s account information or through cookies; upon making a purchase or placing an order at our e-store (The e-store may ask you to provide personal data or personal information in certain areas of the website voluntarily. The requested personal data may include your name, address, postcode, e-mail address, and telephone number.)
Google user data from Google Photos is accessed via Google APIs&Services. Prindipood has read-only access to user photos. Photos are used only in user projects, not shared in any way with other users.
Facebook and Instagram user data is accessed via Facebook API. Prindipood has read-only access to user photos. Photos are used only in user projects, not shared in any way with other users.
Through the collected personal data, we can notify our customers of the news, campaigns, and future events of Prindipood. Customers who do not wish to be in our newsletter mailing list can remove themselves from the list at any time. The collected personal data are also used for delivering goods and for fulfilling our obligations in front of the customer. In order to serve a customer better, Prindipood may disclose information about certain customers to a third party that is providing services to Prindipood and is under a contractual obligation to maintain the confidentiality of the received information. Such third parties include, for example, our partners who are responsible for the delivery of the products ordered at our e-store.
The collected personal data can be viewed, amended, or complimented on our website prindipood.ee, under the section “My personal info”.

Security
All of a customer’s personal data that is obtained in the course of visiting the e-store of Prindipood or making purchases are treated as confidential information. An encrypted data connection channel with banks ensures the security of the personal data and bank details of the person who makes the purchase.

Terms and conditions of and amendments to the privacy policy
We reserve the right to make amendments to the privacy policy, if necessary. We assume that when you start using our website, you have read the principles of the privacy policy and consent to the principles. Please address all questions about the privacy policy or data processing and any issues to the e-mail address pood@prindipood.ee
Prindipood will take all reasonable precautions to prevent the loss, abuse, or change of the information provided by you.

Privacy Policy Amendments
This privacy policy will be updated from time to time and the latest version will always be on our website. If significant changes are made which may impact you, we will also notify these changes in advance via email.

Your Rights
Right to access
You may instruct us to provide you with any personal information we hold about you by emailing your request to pood@prindipood.ee or write to: Pilditeeenused OÜ Supeluse 2, 80012 Pärnu, Estonia.

Right to object to direct marketing
You may instruct us not to process your personal information for marketing purposes by email at any time by using the unsubscribe link in a marketing email you receive or by emailing pood@prindipood.ee with your request.

Right to update or correct information
Please let us know if the personal information which we hold about you needs to be corrected or updated by emailing pood@prindipood.ee.

Right to be forgotten
You have the right to ask us to delete the personal information that we have about you by emailing pood@prindipood.ee.

Right to complain about a supervisory authority
You have the right to complain about the way in which your personal data has been processed by applying to your national supervisory authority for decision.

Retention of personal information
We store personal data for as long as we find it necessary to fulfill the purpose for which the personal data was collected, while also considering our need to answer your queries or resolve possible problems, to comply with legal requirements under applicable laws, to attend to any legal claims/complaints, and for safeguarding purposes.

This means that we may retain your personal data for a reasonable period of time after your last interaction with us. When the personal data that we have collected is no longer required, we will delete it in a secure manner. We may process data for statistical purposes, but in such cases, data will be anonymized.

Business Transfers
In the event of a sale, merger, consolidation, liquidation, reorganization, or acquisition, any acquirer will be subject to our obligations under this Privacy Policy, including your rights to access and choice. We will notify you of the change either by sending you an email or posting a notice on our Website.

Third-party Websites
The website may contain links to other websites. We are not responsible for the privacy policies or practices of third-party websites.

Information Controller
The information controller responsible for our website is Pilditeeenused OÜ Supeluse 2, 80012 Pärnu, Estonia.

Contact
If you have any questions about this privacy policy or our treatment of your personal information, please contact pood@prindipood.ee or write to: Pilditeeenused OÜ Supeluse 2, 80012 Pärnu, Estonia.