PRIVACY POLICY

01.05.2022

This website is owned and operated by Grenardi Estonia OÜ (hereinafter: GRENARDI), legal address: Peterburi tee 46, Tallinn 11415, Estonia, registry code: 11518421. GRENARDI has developed this privacy policy.

Types of Information Collected

GRENARDI collects personal information on the website that visitors to the GRENARDI website enter in their user profile, as well as information about purchases made by customers when they make unauthorized purchases on the website. Users are not required to register or provide any information before viewing or accessing the Website.

When you make a purchase on the website, you must provide your name, shipping method, address, telephone number and email address so that we can process and deliver your purchase and comply with the laws and regulations that apply to us.

If you have registered a GRENARD profile, we process the customer card number automatically assigned to the system, information about purchases made, products viewed, payment methods and wish list, as well as special dates you specify and whether you want to receive offers from us.

If you use the possibility of entering into an installment agreement, GRENARD has the right to ask you for additional information about your income, number of dependents, gender, job, identity card number, type and validity period, so that our loan partner can assess your loan eligibility. To make a loan decision, the partner uses automatic tools to profile the information you provide. If your income is insufficient, the cooperation partner has the right to refuse to grant you a loan.

Data retention period

Once you have registered on the GRENARDI website, we will store your profile data as long as your profile is active. You have the right to ask us to delete your profile by writing to [email protected].

If you made a purchase on the GRENARD website without registering, we will store your purchase data for 5 years from the date of purchase. If you have activated your profile and have been using it for a long time, we will send you a reminder email to make sure you are still interested in our services. If your profile has been inactive for more than 10 years, GRENARDI reserves the right to delete your profile by notifying you in advance by e-mail. Please read more about cookie retention times in the "Cookie Policy" section.

Purpose of processing

The most common purposes for which we process your personal data are to process purchase data, process payments, deliver orders, customer support, accounting, guarantee, send marketing messages, organize prize draws and competitions. However, we still process your data to better develop our business and tailor our services to your needs and to improve our customer service.

GRENARDI may invite visitors to fill in questionnaires and participate in surveys. If multiple choice questions are offered on the website, no personal data is stored. After completing the questionnaire in the GRENARD study, information is stored and collected anonymously.

Legal basis of data processing

We process the data necessary to process your purchase, such as your name, e-mail address, telephone number, delivery address, in order to fulfill the purchase contract concluded with you and to fulfill our legal obligations.

With your consent, we will process your name, e-mail address and/or telephone number that you provide in order to send you information about the latest GRENARD offers.

If you participate in a contest or sweepstakes organized by GRENARD, we process your data based on your acceptance of the terms of the contest or sweepstakes in order to determine the winner and contact you about the prize. You have the right at any time to cancel your participation in such contest or raffle organized by GRENARD.

We use our customers' data based on a legitimate interest to develop our business, adapt it to our customers' needs and develop new products and improve our customer service.

In case of certain disputes, we use our customers' data to file legal claims or to defend our rights in court or supervisory authorities, based on our legitimate interest.

Third parties who provide support services to GRENARD

GRENARDI uses other companies and persons who perform various tasks on its behalf to carry out its business. GRENARDI hires agencies to manage client ads, analyze data, process orders and provide customer support, as well as service providers who provide IT support. Agencies may have access to personal data if it is necessary for the performance of their duties. We have agreements with our partners to properly monitor and control what our partners may do with our customers' customer data. Agencies or partners may not use this information for other purposes and must ensure the confidentiality of the information.

Right to data portability

You may request that GRENARDI publish your personal data in a structured, widely used, machine-readable format or that we transmit it directly to another controller of your choice, but in any case only if

• processing is based on your consent or a contract with you and
• processing takes place with automated means.

The right to portability covers only the data you provide.

Right to object

You can object to the processing of your personal data based on GRENARD's legitimate interest if you believe that your fundamental rights and freedoms outweigh our legitimate interest.

If you have objected, we have the opportunity to demonstrate that we have important legitimate interests that outweigh your rights and freedoms.

GRENARDI will not charge you for exercising your rights related to your personal data. However, if your request for access to information is unfounded or excessive, GRENARD is entitled to charge a reasonable amount based on administrative costs, depending on the circumstances. We will inform you of all costs before fulfilling your request.

GRENARDI reserves the right to require you to prove your identity when you submit a request to exercise any of the rights described here.

Opting out of personal data processing

If you want to opt out of data processing, send a request to [email protected]

Choices and control of data processing

You have complete control over the personally identifiable information you provide on this website. You can change your preferences regarding future communications at any time by sending an email to the address below or by editing the relevant information in the "My Profile" section of this website. You can also cancel your registration completely. In this case, GRENARDI will delete your personally identifiable information from the database.

Responding to inquiries

GRENARDI will respond to inquiries within one month. However, if the applications are particularly complex or if you have submitted several applications, this deadline can be extended to three months. We'll let you know if it takes more than a month to respond.

The right to withdraw your consent

If you have given your consent to receive GRENARDI news by e-mail or by phone, you can withdraw your consent at any time in your profile on the GRENARDI website or by writing to the e-mail address [email protected].

Questions

If you have any questions about how we process your personal data, please send them to [email protected].

In cases where you suspect illegal activity with your data, you have the right to contact the Estonian Data Protection Inspectorate at Tatari 39, Tallinn 10134, Estonia.