1. Basic Concepts Used in the Policy
- Automated processing of personal data — processing of personal data using computer technology;
- Blocking of personal data — temporary suspension of personal data processing (except when processing is necessary to clarify personal data);
- Website — a collection of graphic and informational materials, as well as software programs and databases ensuring their availability on the Internet at https://amanita-muscaria.ee/;
- Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing;
- De-personalization of personal data — actions as a result of which it is impossible to determine without additional information the ownership of personal data by a specific user or other entity;
- Processing of personal data — any action (operation) or set of actions (operations) performed with personal data using automation tools or without them, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), de-personalization, blocking, deletion, destruction;
- Operator — a state body, municipal body, legal entity, or natural person who independently or jointly with others organizes and/or processes personal data, as well as determines the purposes of processing personal data, the composition of personal data subject to processing, and the actions (operations) performed with personal data;
- Personal data — any information directly or indirectly related to a specific user of the website https://amanita-muscaria.ee/;
- User — any visitor of the website https://amanita-muscaria.ee/;
- Provision of personal data — actions aimed at making personal data available to a specific person or group of persons;
- Distribution of personal data — any activity aimed at making personal data available to an unlimited number of people (transfer of personal data) or acquainting an unlimited number of people with personal data, including publication of personal data in the media, placement in information and telecommunications networks, or otherwise making personal data accessible;
- Cross-border transfer of personal data — transfer of personal data to the territory of a foreign country to a foreign authority, foreign natural person, or foreign legal entity;
- Destruction of personal data — any actions resulting in the irreversible destruction of personal data without the possibility of further restoring the content of personal data in the IT system and/or destroying significant physical carriers of personal data.
2. General Provisions
2.1. This Policy applies to all your personal data that we may obtain when you use the online service. This Policy applies to personal data obtained both before and after this policy comes into effect.
2.2. The purpose of the Policy is to provide you with the necessary information to assess what personal data and for what purposes we process, as well as what methods of processing and security measures are used.
2.3. By using the online service and informing the Administration about your personal data, including through third parties, you agree to the processing of your personal data in accordance with this Policy.
2.4. If you do not agree with the terms of this Policy, you must stop using the online service.
2.5. The subject of personal data may withdraw consent for the processing of personal data. If the subject of personal data withdraws consent for the processing of personal data, the Authority has the right to extend the processing of personal data without the consent of the subject if the conditions stipulated by law are met.
2.6. The Website Administration does not verify the accuracy of the personal data submitted by the User, nor can its capacity be assessed. However, the Administration assumes that the User acts in good faith and prudently, submits reliable and sufficient personal data, and makes every effort to ensure that these data remain up-to-date and do not violate the rights of third parties.
2.7. By agreeing to the terms of this Policy, you confirm that at the time of collecting personal data, you are aware of the individuals whose personal data are being transferred, the content, and the purpose of collecting personal data. You confirm (guarantee) that the personal data submitted to us for processing are transferred with the consent of the owners of the personal data and within the framework of the Regulation.
2.8. After receiving personal data from the user, the Administration does not assume the obligation to notify individuals (their representatives) whose personal data are transmitted to it about the start of processing, as the obligation to provide relevant information upon concluding a contract lies with the contractor/subcontractor handling personal data and/or the User who provided the personal data responsible for obtaining such consent for transmission.
2.9. Processing of your personal data complies with legislative requirements. The processing of personal data of individuals located in the EU or citizens of the EU is regulated primarily by the General Data Protection Regulation (GDPR) 2016/679, and laws of other countries may establish additional requirements.
2.10. This Policy covers all information that the administration may receive about the user while using the online service, as well as during the administration of contracts and agreements concluded with the user.
2.11. This Policy is an internal document of the Administration.
2.12. The Operator is released from liability for consequences arising in connection with the processing of personal data if he is not responsible for the incident leading to such consequences. You also agree that the Owner of Personal Data has the right to share and transmit your personal data to third parties without additional obligations, only if the purpose of their processing does not change and only in cases specified in this privacy policy and/or applicable legislation. No one under the age of 18 should provide us with personal data via the web service. We do not knowingly collect personal data from persons under 18 years of age. Parents and guardians should constantly monitor their children’s activities.
3. The Operator May Process the Following User Personal Data
- First name, last name, and patronymic;
- Email address;
- Phone numbers;
- The Website also collects and processes anonymous data about visitors (including cookies) using web-based statistical services (Yandex Metrika, Google Analytics, etc.).
The above data, hereinafter referred to as “personal data,” are combined by the general concept of personal data in this policy.
4. Purposes of Personal Data Processing
The purpose of processing your personal data is to inform you by sending an email; providing the User with access to services, information, and/or materials contained on the website.
The Organizer also has the right to send notifications to the User about new products and services, special offers, and various events. The User always has the right to refuse to receive information messages by sending an email to the operator at [email protected] with the note “Opt-out of receiving notifications about new products and services and special offers”. Anonymized user data collected using internet statistics services are used to gather information about user behavior on the site, improving the quality of the site and its content.
5. Legal Basis for Personal Data Processing
The Operator processes the User’s personal data only if the User has filled them out and/or sent them using special forms available on the website https://amanita-muscaria.ee/. By filling out the corresponding forms and/or sending your personal data to the operator, the User agrees to this Policy.
The Operator processes anonymized data about the User provided that this is allowed in the User’s browser settings (the option to save cookies and JavaScript technology is enabled).
6. Procedure for Collecting, Storing, Transferring, and Otherwise Processing Personal Data
The security of personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures necessary for full compliance with current provisions on personal data protection.
The Operator ensures the preservation of personal data and takes all possible measures to exclude unauthorized access to personal data by unauthorized persons.
The User’s personal data are never transferred to third parties under any circumstances, except in cases related to the enforcement of current law.
If inaccuracies are discovered in personal data, the User can update them themselves by sending a notification to the operator’s email address [email protected] with the mark “Updating personal data”. The period of processing personal data is indefinite. The User may revoke consent to the processing of personal data at any time by sending an email to the operator’s email address [email protected] with the mark “Withdrawal of consent to personal data processing”.
7. Cross-Border Transfer of Personal Data
Before starting cross-border transfer of personal data, the operator is obliged to ensure that the foreign country to whose territory personal data are transferred provides reliable protection of the rights of subjects of personal data. Cross-border transfer of personal data to territories of foreign countries that do not meet the aforementioned requirements may be carried out solely with the written consent of the subject of personal data for the cross-border transfer of his/her personal data and/or fulfillment of the contract to which the subject of personal data is a party.
8. Final Provisions
The User may obtain clarifications on questions concerning him regarding the processing of his personal data by contacting the operator via email at [email protected].
This document reflects all changes to the operator’s personal data processing policy. The Policy is valid indefinitely until replaced by a new version.
The current version of the Policy is freely available on the Internet at https://amanita-muscaria.ee/privacy-policy.