VITATEKA PRIVACY POLICY
VITATEKA has committed to being your trusted and respectful partner in handling personal data. Based on this commitment, we have developed principles of privacy policy regarding the collection, use, disclosure, transfer, and storage of customer data.
1. DEFINITIONS
1.1. Personal Data Subject is an individual about whom VITATEKA has data that can be used to identify them. Examples of personal data subjects include customers, cooperation partners, and employees whose personal data VITATEKA possesses.
1.2. Privacy Terms are the current text outlining the principles of VITATEKA's personal data processing.
1.3. Personal Data is any information about an identified or identifiable individual.
1.4. Personal Data Processing is any action performed with personal data, regardless of the method or means used, such as collection, recording, systematization, storage, alteration, disclosure, provision of access, response to requests and provision of extracts, use, transfer, merging, closure, deletion, or destruction, or a combination of several of these actions.
1.5. Customer is any natural or legal person using or intending to use VITATEKA's services.
1.6. Contract is an agreement between the customer and VITATEKA for the provision of services or any other agreement.
1.7. Website vitateka.ee is VITATEKA's website.
1.8. Guest is a person using VITATEKA's website.
1.9. Child is a person under 13 years of age in the context of personal data processing in the Republic of Estonia.
1.10. Services are all types of services and products offered by VITATEKA.
1.11. Cookies are data sometimes stored on a guest's device when using the website.
1.12. VITATEKA Data Protection Officer is a person adhering to VITATEKA's personal data processing principles and whom a personal data subject can contact in case of complaints.
1.13. Sales Channels are channels used by VITATEKA to communicate with personal data subjects, sell goods and services, including email, phone, social networks, various chats, personalized and interactive advertisements, and similar tools on websites and elsewhere.
1.14. Product Portfolio is VITATEKA's various products and services listed on the website vitateka.ee.
In privacy terms, contracts, general terms, and in communication between parties, terms are used with the meanings specified above.
2. GENERAL PROVISIONS
2.1. VITATEKA is the legal entity VITATEKA OÜ, registration code 12779903, address Mõisa tee 5, Kostivere alevik, Jõelähtme vald, Harju maakond, 74204, KOSTIVERE.
2.2. VITATEKA may process personal data:
2.2.1. As the data controller, determining the purposes and means of personal data processing;
2.2.2. As a data processor authorized according to instructions from the data controller;
2.2.3. As a recipient to whom personal data is transferred.
2.3. Privacy terms apply to personal data subjects, and all rights and obligations stated in the privacy terms extend to all VITATEKA employees and partners handling personal data owned by VITATEKA.
2.3.1. Privacy terms may complement privacy notices published on the website or on devices, and privacy terms may be amended or supplemented by such notices.
3. PRINCIPLES
3.1. When processing personal data, VITATEKA relies on the interests, rights, and freedoms of the personal data subject.
3.2. VITATEKA aims for responsible personal data processing based on best practices, ensuring ongoing readiness to demonstrate compliance with the purposes of personal data processing.
3.3. All processes, guidelines, procedures, and actions related to personal data processing at VITATEKA are based on the following principles:
3.3.1. Lawfulness. There is a lawful basis for processing personal data, such as consent;
3.3.2. Fairness. Personal data processing is fair, requiring, in particular, that the personal data subject has sufficient information on how personal data are processed;
3.3.3. Transparency. Personal data processing is transparent to the personal data subject;
3.3.4. Purpose Limitation. Personal data are collected for specific, lawful purposes and are not subsequently used in a manner that is incompatible with those purposes;
3.3.5. Data Minimization. Personal data processing is limited to data that are necessary for the purposes that are lawful, including managing personal data;
3.3.6. Integrity and Confidentiality. Personal data are processed in a manner that ensures adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage;
3.3.7. Storage Limitation. Personal data are kept no longer than necessary for the purposes for which they were collected or further processed;
3.3.8. Accountability. The primary objective of personal data processing is accountability, transforming personal data.
3.4. Purposes of Personal Data Collection:
We collect and process personal data such as name, surname, address, phone number, and others for the following purposes:
- Processing contracts and orders, including providing information on orders and delivery of goods or provision of services.
- Providing feedback and customer support, including responding to inquiries and notifications.
- Providing personalized recommendations and offers based on customer preferences.
- Compliance with legal requirements, including accounting and taxation.
4. PROCESSING OF PERSONAL DATA
4.1. Retention and Use of Personal Data. VITATEKA retains and uses personal data only to the extent necessary for the provision of services and for further purposes as specified in the privacy notice, and as agreed upon by the personal data subject.
4.2. Collection of Personal Data Only for Lawful Purposes. Operations related to the processing of personal data are based on purposes that require, in particular, the consent of the personal data subject or another lawful basis.
4.3. Storage Period. Personal data are stored in a form that allows identification of the personal data subject for no longer than necessary for the purposes for which they are processed.
4.4. Access Limitation. Processed personal data are protected against unauthorized access, alteration, or destruction.
5. ACCEPTANCE OF PRIVACY TERMS
5.1. Consent. The personal data subject voluntarily, clearly, knowingly, and unambiguously gives consent, for example, by checking the necessary field on the website.
5.2. Withdrawal. The personal data subject may withdraw consent at any time.
5.3. Processing of Personal Data. Based on consent, VITATEKA processes personal data strictly within the scope and purposes defined by the personal data subject of VITATEKA, adhering to the principle that any consent must be clearly distinguishable.
6. TRANSFER OF PERSONAL DATA
6.1. Transfer. VITATEKA collaborates with individuals to whom, within the framework and for the purposes of cooperation, VITATEKA may transfer data related to the personal data subject, including Personal Data.
6.2. Exception. In case of transferring personal data, VITATEKA applies measures to ensure data security, including, but not limited to, data protection.
7. RIGHTS OF THE PERSONAL DATA SUBJECT
7.1. Rights. The personal data subject has the right at any time to restrict access, correct, or delete personal data provided to VITATEKA, as well as the right to request restriction of their processing.
7.2. Access to Information. In case the personal data subject requests access to personal data from VITATEKA, VITATEKA provides access to personal data.
8. SPECIAL CASES
8.1. Data Processing. VITATEKA processes personal data strictly in accordance with the law and in compliance with the requirements set forth in the privacy terms.
8.2. Changes to Terms. VITATEKA reserves the right to change the privacy terms at any time without notifying the personal data subject.
9. CONSENT
9.1. Acceptance of Terms. The personal data subject accepts the privacy terms, acknowledging that these terms apply to transactions conducted with VITATEKA.
10. DATA PROTECTION
10.1. Data Retention. VITATEKA ensures the protection of personal data using technical and organizational measures to prevent unauthorized access, alteration, disclosure, or destruction of personal data.
10.2. Contact. Questions regarding personal data can be directed via email to [email protected].
10.3. Inspectorate. Contact information for the Data Protection Inspectorate (AKI) can be found on the Data Protection Inspectorate's homepage at: http://www.aki.ee/et/inspektsioon/kontaktid-nouandetelefon .
10.4. Product Portfolio. Information about VITATEKA's product portfolio is available on the website vitateka.ee.
11. OTHER PROVISIONS
11.1. Contact Information. VITATEKA's contact information can be found on the website vitateka.ee.
11.2. Document. In case of discrepancies between the privacy terms and other publications on the website, the privacy terms shall prevail unless otherwise stated.
11.3. Deactivation of Accounts:
We reserve the right to deactivate the accounts of new customers who have not made at least one confirmed purchase within one month of registration. A confirmed purchase is one that has been successfully completed and paid for.
11.4. Deletion of Unpaid Carts (Orders) for Regular Customers:
We reserve the right to delete unpaid carts (orders) for regular customers that have not been paid for within 2 weeks from their creation. The customer account remains active.