1.1.<\/strong> 1.2.<\/strong> 1.3.<\/strong> 1.4.<\/strong> 2.1.<\/strong> 2.2.<\/strong> 2.3.<\/strong> 2.4.<\/strong> 3.1.<\/strong> 3.2.<\/strong> 3.3.<\/strong> 3.4.1.<\/strong> 3.4.2.<\/strong> 3.4.3.<\/strong> 3.4.4.<\/strong> 3.4.5.<\/strong> 3.4.6.<\/strong> 3.5.1.<\/strong> 3.5.2.<\/strong> 3.5.3.<\/strong> 3.5.4.<\/strong> 4.1.<\/strong> 4.2.<\/strong> 4.3.<\/strong> 4.4.<\/strong> 4.5.<\/strong> 4.6.<\/strong> 5.1.<\/strong>
This privacy policy regulates the principles regarding the collection,\nprocessing and storage of personal data. Personal data is collected, processed\nand stored by the personal data controller Housing O\u00dc (hereinafter the data\nprocessor).<\/p>\n\n\n\n
A data subject in the sense of the privacy policy is a customer or other\nnatural person whose personal data is processed by the data processor.<\/p>\n\n\n\n
A customer in the sense of the privacy policy is anyone who buys goods or\nservices from the website of the data processor.<\/p>\n\n\n\n
The data processor complies with the principles of data processing\nstipulated in legislation, among other things, the data processor processes personal data legally, fairly and securely. The data processor is able to confirm\nthat personal data has been processed in accordance with the provisions of\nlegislation.<\/p>\n\n\n\n2. COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA<\/h3>\n\n\n\n
The personal data that the data processor collects, processes and stores is\ncollected electronically, mainly via the website and e-mail.<\/p>\n\n\n\n
By sharing his personal data, the data subject gives the data processor the\nright to collect, organize, use and manage personal data for the purposes\ndefined in the privacy policy, which the data subject directly or indirectly\nshares with the data processor when purchasing goods or services on the\nwebsite.<\/p>\n\n\n\n
The data subject is responsible for ensuring that the data provided by him\nis accurate, correct and complete. Knowingly providing false information is\nconsidered a violation of the Privacy Policy. The data subject is obliged to\nimmediately notify the data processor of changes in the provided data.<\/p>\n\n\n\n
The data processor is not responsible for damage to the data subject or\nthird parties caused by the data subject providing false information.<\/p>\n\n\n\n
\n\n\n\n3. PROCESSING OF CUSTOMERS' PERSONAL DATA<\/h3>\n\n\n\n
The data processor may process the following personal data of the data\nsubject:<\/p>\n\n\n\n\n
In addition to the above, the data processor has the right to collect data\nabout the customer that are available in public registers.<\/p>\n\n\n\n
The legal basis for the processing of personal data is Article 6(1)(a), (b), (c)\nand (f) of the General Regulation on the Protection of Personal Data:<\/p>\n\n\n\n\n
\n\n\n\n3.4. PURPOSES OF PERSONAL DATA PROCESSING AND DATA RETENTION<\/h3>\n\n\n\n
Purpose of processing: ensuring security and safety.
Personal data retention period: in accordance with the time limits prescribed by law.<\/p>\n\n\n\n
Purpose of processing: order processing.
Personal data retention period: 2 years.<\/p>\n\n\n\n
Purpose of processing: ensuring the operation of e-shop services
Personal data retention period: 2 years.<\/p>\n\n\n\n
Purpose of processing: customer management
Personal data retention period: 2 years.<\/p>\n\n\n\n
Purpose of processing: financial operations and accounting
Personal data retention period: in accordance with the time limits prescribed by law.<\/p>\n\n\n\n
Purpose of processing: marketing
Personal data retention period: 2 years.<\/p>\n\n\n\n
\n\n\n\n3.5. DATA TRANSFER AND SECURITY<\/h3>\n\n\n\n
The data controller has the right to transfer customers\u2019 personal data to third parties, including authorized data processors, accountants, transport and courier companies, and payment service providers.<\/p>\n\n\n\n
The data controller is the controller of personal data and transfers the personal data necessary for processing payments to the authorized processor ESTO AS.<\/p>\n\n\n\n
The data controller implements appropriate organizational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, or other unlawful processing.<\/p>\n\n\n\n
Personal data is stored only for as long as necessary to fulfill the purposes of processing, but no longer than 2 years, unless legislation provides for a longer retention period.<\/p>\n\n\n\n
\n\n\n\n4. DATA SUBJECT RIGHTS<\/h3>\n\n\n\n
The data subject has the right to access their personal data.<\/p>\n\n\n\n
The data subject has the right to receive information about the processing of their personal data.<\/p>\n\n\n\n
The data subject has the right to request the correction or completion of inaccurate personal data.<\/p>\n\n\n\n
If personal data is processed based on the data subject\u2019s consent, the data subject has the right to withdraw consent at any time.<\/p>\n\n\n\n
To exercise their rights, the data subject may contact the e-shop\u2019s customer support at the address info@grovegz.com<\/strong>.<\/p>\n\n\n\n
The data subject has the right to lodge a complaint with the Data Protection Inspectorate to protect their rights.<\/p>\n\n\n\n
\n\n\n\n
5. FINAL PROVISIONS<\/h3>\n\n\n\n
These data protection terms have been prepared in accordance with Regulation EU 2016\/679 of the European Parliament and of the Council GDPR, the Personal Data Protection Act of the Republic of Estonia, and other legislation of the European Union and the Republic of Estonia.<\/p>\n\n\n\n