Private limited company Krimelte principles of data usage
Personal data to be collected, the purposes for which the personal data are processed and legal bases
We process the personal data (including name, phone number, e-mail address) entered by the Partner Portal user only to process the order and send the goods to the Purchaser. In this case, the legal basis for the processing of the user’s personal data is our legitimate interest in the need to perform a contract concluded with a customer (Article 6(1)(f) of the GDPR).
We also process the user’s personal data in order to comply with our legal obligations (Article 6(1)(c) of the GDPR), for example in order to comply with accounting obligations.
We can also process your personal data to protect our rights (e.g. to submit claims or defend ourselves against claims), in which case the legal basis for the processing of personal data is our legitimate interest in defending our rights (Article 6(1)(f) of the GDPR).
We assume that the Partner Portal user acts as the representative of the Purchaser in the Purchaser’s economic interest and representing the Purchaser’s economic activity. As a result of considering conflicting interests, we have found that, in a situation where we process the personal data of a user on the basis of our legitimate interest, our interest outweighs the interests, fundamental rights and freedoms of the user for which personal data must be protected. The user has the right to object at any time to the processing of personal data based on a legitimate interest by contacting us using the contact information pointed out below.
In addition, we process the user's personal information (name, e-mail address) to send newsletters and offers to the user. We will only do so if you have given us your consent. The user will be able to unsubscribe the emailed offers and newsletters at any time by notifying us thereof by e-mail or following the instructions given in the e-mail containing the offers.
Transfer of personal data
We will only share the user’s personal data if we have a legitimate need and a legal basis to do so.
For example, in our activities, we use service providers that process personal data for the purposes set by us and in accordance with our instructions. Such authorised processors are, for example, the providers of IT management services and logistics and transport services. All authorised processors have provided sufficient guarantees for the implementation of appropriate technical and organisational measures to ensure the protection of the user's personal data. Proper data processing agreements have been concluded with all of the authorised processors.
We can also transfer personal data to the following third parties, who act as independent authorised processors in relation to your personal data:
legal service providers, where the transfer is necessary to protect our rights, in which case the legal basis for the transfer of personal data is our legitimate interest in protecting our rights (Article 6(1)(f) of the GDPR);
third parties to whom the obligation to transfer personal data derives from legislation, in particular the professional and supervisory authorities, in which case we transfer personal data for the purpose of fulfilling our legal obligation (Article 6(1)(c) of the GDPR).
We do not transfer personal data outside the European Union or the European Economic Area.
Retention of personal data
We will retain personal data as long as it is necessary to meet the purpose for which we collected them. For example, we retain personal data for 7 years from the end of the relevant financial year in order to comply with the accounting obligation.
Rights in respect of personal data
The users will have all the rights provided for in the applicable legislation in respect of their personal data to the extent specified therein. These include the right of the users to request access to their personal data, including the right to obtain a copy of the personal data, the right to rectification or erasure of data, the right to restrict the processing of personal data, and the right to request the transmission of data. On the basis of a legitimate interest in the processing of personal data, the users will have the right to object to processing and, in the case of processing with consent, to withdraw their consent. You are also entitled to refer the complaint to the supervisory authority.
We use Google Analytics and Hotjar analytical cookies, which gather information on the use of the website and the number of visits, which are stored on the user’s device until the cookies are deleted.
You can read more about cookies and their removal here https://www.allaboutcookies.org/ or from the ‘Help’ section of your browser.
13619 Tallinn, Estonia
Telephone: +372 6059 300