Privacy Policy

1. General provisions

1.1. This Privacy Policy sets out the principles governing the collection, processing, and storage of personal data. The personal data are collected and stored by the data controller No-Glute OÜ, Ravi St 1-19, Pärnu city, Pärnu County, 80024 (hereinafter referred to as the Controller).

If you have any questions about the processing of personal data, please contact us:

– by sending an email to: info@fibner.ee

– by calling us: +372 53890590

1.2. For the purposes of this Privacy Policy, a data subject is a Client or other natural person whose personal data is processed by the Controller.

1.3. For the purposes of this Privacy Policy, a Client is anyone who purchases goods from the website of the Controller.

1.4. The Controller complies with the data processing principles set out in legal acts, including processing personal data lawfully, fairly, and securely. The Controller is able to confirm that personal data has been processed in accordance with legal acts.

1. Collection, processing, and storage of personal data

2.1. The personal data collected, processed, and stored by the Controller are collected electronically, mainly through the website and e-mail. 

2.2. By sharing their personal data, the data subject grants the Controller the right to collect, organise, use, and manage the personal data which the data subject directly or indirectly shares with the Controller when purchasing goods on the website for the purposes specified in the Privacy Policy.

2.3. It is the data subject’s responsibility to ensure that the information they provide is accurate, correct, and complete. Knowingly providing false information will be considered a breach of the Privacy Policy. It is the data subject’s responsibility to inform the Controller immediately of any changes to the data provided.

2.4. The Controller shall not be liable for any damage caused to the data subject or to third parties by the provision of false information by the data subject.

1. Processing of personal data of Clients

The controller of personal data is No Glute OÜ.

No Glute OÜ transmits the personal data necessary for the processing of payments to transport companies and payment processing companies.

3.1. The Controller may process the following personal data of the data subjects:

3.1.1. first name and surname;

3.1.2. date of birth;

3.1.3. phone number;

3.1.4. e-mail address;

3.1.5. delivery address;

3.2. In addition to the above, the Controller is entitled to collect data about the Client that is available in public registers.

3.3. The legal basis for the processing of personal data is paragraphs (a), (b), (c) and (f) of Article 6 (1) of the General Data Protection Regulation:

1. (a) the data subject has given their consent to the processing of their personal data for one or more specific purposes;
2. (b) the processing of personal data is necessary for the fulfilment of a contract signed with the participation of the data subject or for the fulfilment of pre-contractual measures at the request of the data subject;
3. (c) the processing of personal data is necessary for compliance with the Controller’s legal obligations;
4. (d) the processing of personal data is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests override the interests of the data subject or the fundamental rights and freedoms for which the personal data must be protected, particularly when the data subject is a child.

3.4. The processing of personal data according to the purposes for which it is processed:

3.4.1. Order processing
The maximum period of storage of personal data is until the Client withdraws their consent to the processing of their personal data or until the legal time limit from the date of the last purchase on the website.

3.4.2. Ensuring the functioning of the Online Shop services
The maximum period of storage of personal data is until the Client withdraws their consent to the processing of their personal data or until the legal time limit from the date of the last purchase on the website.

3.4.3. Client management
The maximum period of storage of personal data is until the Client withdraws their consent to the processing of their personal data or until the legal time limit from the date of the last purchase on the website.

3.4.4. Finance, accounting
The maximum period of storage of personal data is in accordance with the time limits specified by law.

3.4.5. Marketing

The personal data we collect allows us to inform Clients about product news, promotions, and upcoming events. A Client who does not wish to be on our newsletter list can unsubscribe at any time. The Client may opt out of receiving offers and newsletters by e-mailing us or by following the instructions at the bottom of an e-mail containing offers.

The maximum period of storage of personal data is until the Client withdraws their consent to the processing of their personal data or until the legal time limit from the date of the last purchase on the website.

3.4.6. Safety and security
The maximum period of storage of personal data is in accordance with the time limits specified by law.

3.5. The Controller shall have the right to share the Clients’ personal data with third parties, such as data processors, accountants, transport and courier companies, companies providing money transfer services. The Controller is the controller of the personal data. The Controller shall implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.

1. Rights of the data subject

4.1. The data subject shall have the right to access and review their personal data.

4.2. The data subject shall have the right to be informed about the processing of their personal data.

4.3. The data subject shall have the right to update or correct inaccurate data.

4.4. If the Controller processes a data subject’s personal data in accordance with the data subject’s consent, the data subject shall have the right to withdraw their consent at any time.

4.5. To exercise their rights, the data subjects can contact the Online Shop’s Client support at info@fibner.ee.

4.6. The data subject can file a complaint with the Data Protection Inspectorate (www.aki.ee) to protect their rights.

1. Final provisions

5.1. These data protection terms and conditions have been drawn up in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC / EC (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia and the legal acts of the Republic of Estonia and the European Union.

5.2. The Controller shall have the right to amend the data protection terms and conditions, in whole or in part, at any time by informing data subjects of the amendments via the website www.no-glute.com.