{"id":1670,"date":"2021-11-29T12:26:37","date_gmt":"2021-11-29T12:26:37","guid":{"rendered":"https:\/\/loodu.ee\/privacy-policy\/"},"modified":"2021-11-29T12:26:37","modified_gmt":"2021-11-29T12:26:37","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/loodu.ee\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<h3 class=\"wp-el wp-block-heading\">1. 1.\tGeneral provisions<\/h3>\n\n<p class=\"wp-el\">1.1. \tThis Privacy Policy sets out the principles governing the collection, processing and storage of personal data. Personal data is collected and stored by the controller Loodu O\u00dc (registry code 14992146) (hereinafter referred to as the controller).<\/p>\n\n<p class=\"wp-el\">1.2. \tFor the purposes of this Privacy Policy, a data subject means the client or another natural person whose personal data are processed by the controller.<\/p>\n\n<p class=\"wp-el\">1.3.\tFor the purposes of this Privacy Policy, a client means anyone who purchases goods or services on the controller\u2019s website.<\/p>\n\n<p class=\"wp-el\">1.4.\tThe controller complies with the data processing principles set out in legislation, including processing personal data lawfully, fairly and securely. The controller is able to confirm that the personal data have been processed in accordance with the law.<\/p>\n\n<h3 class=\"wp-el wp-block-heading\">2.\tCollection, processing and storage of personal data<\/h3>\n\n<p class=\"wp-el\">2.1.\tThe personal data collected, processed and stored by the controller have been collected electronically, mainly via the website and e-mail.<\/p>\n\n<p class=\"wp-el\">2.2.\tBy sharing their personal data, the data subject grants the controller the right collect, organise, use and manage the personal data that the data subject shares directly or indirectly when purchasing goods or services from the website for the purposes specified in the Privacy Policy.<\/p>\n\n<p class=\"wp-el\">2.3.\tIt is the responsibility of the data subject to ensure that the information they provide is accurate, correct and complete. Submission of knowingly false data is regarded as a breach of the Privacy Policy. The data subject is required to immediately notify the controller of any changes to the data submitted.<\/p>\n\n<p class=\"wp-el\">2.4.\tThe controller is not responsible for any damage caused by the submission of false information by the data subject to the data subject or third parties.<\/p>\n\n<h3 class=\"wp-el wp-block-heading\">3.\tProcessing of customers\u2019 personal data<\/h3>\n\n<p class=\"wp-el\">3.1.\tThe controller may process the following personal data of the data subject:<\/p>\n\n<p class=\"wp-el\">3.1.1.\tGiven name and surname<\/p>\n\n<p class=\"wp-el\">3.1.2.\tDate of birth<\/p>\n\n<p class=\"wp-el\">3.1.3.\tTelephone number<\/p>\n\n<p class=\"wp-el\">3.1.4.\tE-mail address<\/p>\n\n<p class=\"wp-el\">3.1.5.\tDelivery address<\/p>\n\n<p class=\"wp-el\">3.1.6.\tBank account number<\/p>\n\n<p class=\"wp-el\">3.1.7.\tPayment card details<\/p>\n\n<p class=\"wp-el\">3.2.\tIn addition to the foregoing, the controller has the right to collect data about the customer that are available in public registers.<\/p>\n\n<p class=\"wp-el\">3.3.\tThe legal basis for the processing of personal data is clauses (a), (b), (c) and (f) of Article 6(1) of the General Data Protection Regulation:<\/p>\n\n<p class=\"wp-el\">a)\tthe data subject consented to the processing of their personal data for one or more specific purposes<\/p>\n\n<p class=\"wp-el\">b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract<\/p>\n\n<p class=\"wp-el\">c)\tprocessing is necessary for compliance with a legal obligation to which the controller is subject<\/p>\n\n<p class=\"wp-el\">f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests override the interests of the data subject or the fundamental rights and freedoms for which the personal data must be protected, in particular if the data subject is a child<\/p>\n\n<p class=\"wp-el\">3.4.\tProcessing of personal data according to the purpose of processing:<\/p>\n\n<p class=\"wp-el\">3.4.1.\tPurpose of processing \u2013 security and safety Maximum period of storage of personal data \u2013 according to the terms specified by law<\/p>\n\n<p class=\"wp-el\">Maximum period of storage of personal data \u2013 according to the terms specified by law<\/p>\n\n<p class=\"wp-el\">3.4.2.\tPurpose of processing \u2013 processing of orders Maximum storage period for keeping personal data \u2013 ten years<\/p>\n\n<p class=\"wp-el\">Maximum storage period for keeping personal data \u2013 ten years<\/p>\n\n<p class=\"wp-el\">3.4.3.\tPurpose of processing \u2013 ensuring the functioning of online shop services Maximum storage period for keeping personal data \u2013 ten years<\/p>\n\n<p class=\"wp-el\">Maximum storage period for keeping personal data \u2013 ten years<\/p>\n\n<p class=\"wp-el\">3.4.4.\tPurpose of processing \u2013 client management <\/p>\n\n<p class=\"wp-el\">Maximum storage period for keeping personal data \u2013 ten years<\/p>\n\n<p class=\"wp-el\">3.4.5.\tPurpose of processing \u2013 financial activities, accounting<\/p>\n\n<p class=\"wp-el\">Maximum period of storage of personal data \u2013 according to the terms specified by law<\/p>\n\n<p class=\"wp-el\">3.4.6.\tPurpose of processing \u2013 marketing<\/p>\n\n<p class=\"wp-el\">Maximum storage period for keeping personal data \u2013 five years<\/p>\n\n<p class=\"wp-el\">3.5.\tThe controller has the right to share customers\u2019 personal data with third parties, such as authorised controllers, accountants, transport and courier companies and companies providing transfer services. The controller processes personal data. The controller forwards the personal data necessary for the execution of payments to the authorised processor Montonio Finance UAB and to the transport company for the transport of the goods.<\/p>\n\n<p class=\"wp-el\">3.6.\tWhen processing and storing the personal data of the data subject, the controller implements organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful forms of processing.<\/p>\n\n<p class=\"wp-el\">3.7.\tThe controller keeps the data of the data subjects for a period of time depending on the purpose of the processing, but for no longer than ten years.<\/p>\n\n<p class=\"wp-el\">3.8.\tThe controller may collect non-personal data that cannot be directly linked to a specific individual (gender, age, preferred language, location). The controller may also collect data about customer activities on the website. These data are aggregated and used to identify which parts of the website, goods and services are of most interest. Aggregate data are treated as non-personal data in this Privacy Policy.<\/p>\n\n<h3 class=\"wp-el wp-block-heading\">4.\tRights of data subjects<\/h3>\n\n<p class=\"wp-el\">4.1.\tThe data subject has the right to gain access to and examine their personal data.<\/p>\n\n<p class=\"wp-el\">4.2.\tThe data subject has the right to obtain information on the processing of their personal data.<\/p>\n\n<p class=\"wp-el\">4.3.\tThe data subject has the right to modify or rectify inaccurate data.<\/p>\n\n<p class=\"wp-el\">4.4.\tIf the controller processes the data of the data subject on the basis of the data subject\u2019s consent, the data subject has the right to withdraw the consent at any time.<\/p>\n\n<p class=\"wp-el\">4.5.\tTo exercise their rights, the data subject can contact the customer support of the Online Shop by writing to info@loodu.ee.<\/p>\n\n<p class=\"wp-el\">4.6.\tTo protect their rights, the data subject can file a complaint with the Data Protection Inspectorate.<\/p>\n\n<h3 class=\"wp-el wp-block-heading\">5.\tFinal provisions<\/h3>\n\n<p class=\"wp-el\">5.1.\tThese Data Protection Terms and Conditions have been drawn up in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection), the Personal Data Protection Act of the Republic of Estonia and the legislation of the Republic of Estonia and the European Union.<\/p>\n\n<p class=\"wp-el\">5.2.\tThe controller has the right to change the data protection conditions in part or in full by informing the data subjects of these changes via the website loodu.ee.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. 1. General provisions 1.1. This Privacy Policy sets out the principles governing the collection, processing and storage of personal&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":110,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-1670","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/pages\/1670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/comments?post=1670"}],"version-history":[{"count":1,"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/pages\/1670\/revisions"}],"predecessor-version":[{"id":1672,"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/pages\/1670\/revisions\/1672"}],"wp:attachment":[{"href":"https:\/\/loodu.ee\/en\/wp-json\/wp\/v2\/media?parent=1670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}