Effective as of 20th of October 2020
1. General Provisions
1.2 The information on Users is divided into personally identifiable and non-personally identifiable information depending on whether information can identify the User as a specific person.
1.3 SIA „STAARTER”, reg nr. 40203156866, address: Elizabetes Iela 39-20, Riga, LV-1010, Latvia has a position of a ‘Controller’ as defined in European Union General Data Protection Regulation (GDPR) and we shall be responsible for, and be able to demonstrate compliance with, the principles relating to processing of personal data. We can be contacted by sending an e-mail to email@example.com .
2. Collection and Use of Personally Identifiable Information
2.1 We may obtain some of your personal information in order to provide our Services. The information we collect is necessary to provide our Services, and we shall not collect any information which is not required by the nature of our Services. We may collect some of the following personal Information:
- First and last name
- E-mail address
- Phone number
- IP address
- Social media ID
- Payment information and transaction history
2.2 In order to register to use our Platform you have to provide your first and last name. We will only use this information to create an account for you and to address you whenever we contact you. The legal basis for processing of this information is contractual obligation. If you do not provide your name during the registration you will not be able to register an account with us.
(B) Email address
2.3 We will collect your email address on a basis of your consent or for delivering our Services depending on the situation. We will collect your email address in the following cases:
- When you contact us. We will collect your email address whenever you contact us through our email. Whenever we collect your email address this way, we will only use it in order to respond to your inquiry.
(C) Phone Number
2.5 We may collect your phone number on a basis of your consent. If you provide your phone number we will use this information to provide SMS notifications. Phone number is not necessary for registration of a Customer account and in the absence of this information we will communicate only via email. Merchants are required to provide their phone number; however, this information relates to a legal entity and not a private individual.
2.6 We may collect your physical address in order to validate the Merchant accounts or to deliver you the requested items. The legal basis for processing of this information is contractual obligation. If you do not provide your address during your purchase we will not be able to deliver you the requested items.
(E) IP Address
2.7 We integrate security systems on our Platform to prevent malicious attempts and exploits of the Platform. We scan IP address and ban IP addresses that show malicious signs such as too many password failures, seeking exploits and similar. We process this information in the interest of protecting the integrity of the Platform and of the databases connected with it, including database of information collected from Users. We use your IP address on a basis of a legitimate interest.
(F) Social Media ID
2.8 We will collect your social media ID on a basis of your consent and in the interest of providing our Services. When you choose to register with your social media account, we will collect your Social Media ID to create an account for you and to connect your account password and email with the right ID. We do not collect your third-party service password. For example, when you choose to register through your Facebook account, you will be referred to the Facebook consent dialogue box, after which, if the consent is provided, we will collect your name, e-mail address, profile photo, and information which is publicly available on your profile in order to create and facilitate your account and user profile.
(G) Payment information and transaction history
2.9 We require your billing information in order to issue you an appropriate invoice for the requested items. We will keep track of your transaction history through the Platform in the event of any disputes and to analyze shopping trends and effect of promotions or offers. We will process payment history for this purpose on the basis of our legitimate interest. We may also process Merchants payment information such as bank names and IBAN; however, this information relates to a legal entity and not a private individual.
(H) Information sharing
2.10 If you make a purchase through the use of our Platform, we may share your information with the Merchants whose goods or services you purchased. We may also share this information with the Merchants whose stores you have selected as favourites through the Platform. This information is shared in order to analyze market trends and to adjust Merchant’s offers. Typically, no one can identify a specific individual only with this information, but if you do not want your information to be shared you may delete your user account or object to our information sharing. DesignScan is not responsible for the information Users share with other Users in private massages exchanged through Platform or by any other mean outside the Platform.
2.11 We may share User’s information with other Third-Parties under the strict data processing agreements in order to improve our services and overall User experience. We will anonymize User data whenever possible prior to disclosure. If anonymization is not possible we will seek User consent for data sharing for the purpose specified in this paragraph.
2.12 We may disclose your personal information to our partners, agents and operators under confidentiality or similar agreements, including payment processors who we believe reasonably need to come into contact with that information: (i) to provide Services per your request; (ii) to administer our business or the Site; (iii) to provide customer support; (iv) to update account information; (v) to forward updates, announcements, and newsletters; (vi) to respond to your communications, and communicate with you about the Platform and other activities related to the Platform; (vii) in the event of any reorganization, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of the Platform’s business or operations (including without limitation in connection with bankruptcy or any similar proceedings); or (viii) as otherwise authorized by you.
2.13 Some Services will not be available to you if you do not provide requested information. We may keep records of any questions, complaints or compliments made by you and the response if any. Whenever you contact us, we shall collect any information which you chose to provide. We shall store and use this information only for the purpose of responding to your inquiries. Information contained within the inquiry, free from any personally identifiable information, will be stored on our servers for the purpose of improving our Services and providing the best customer support possible.
2.15 We have implemented security procedures and measures in order to ensure appropriate protection of the information we process, against any misuse, unauthorized access, disclosure or modification.
2.16 We acknowledge that the safety of your Information is one of the highest priorities and therefore only authorized processors have access to your information. Although we take all appropriate measures in respect to keeping your information secure, you understand that no data security measures in the world can offer 100% protection.
2.17 Users may request access to and modification of personal information and the exercise of the right to object. Such requests are submitted to firstname.lastname@example.org .
3. Children privacy
3.1 The services are intended for a general audience and are not targeted at children. We take children’s online safety very seriously, and if we ever learn that the Information collected belongs to a child, we will immediately remove any such information. If you are younger than 18 you are not allowed to register or use the Platform.
4. Collection and Use of Non-Personally Identifiable Information
4.1 The Site collects a series of general data and information when a User or automated system calls up the Platform. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the internet site, (6) the internet service provider of the accessing system, and (7) any other similar data and information that may be used in the event of attacks on our information technology systems.
4.2 We collect this information for breach investigation purposes. When using this information, we do not draw any conclusions about the User. Rather, this information is needed to (1) deliver the content of our Platform correctly, (2) optimize the content of our Platform as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. The anonymous data of the server log files are stored separately from all personal data provided by a User.
5. Storage and transfer of information
5.1 Information will be stored on secure servers located in the European Union under the supervision of DesignScan. Hosted servers are controlled and maintained in accordance with sufficient privacy safeguards. We may store or transfer Information to servers located in countries outside of European Union, provided that such countries implement appropriate and suitable safeguards regarding the security of personal information.
5.2 If you register an account with us we will store your Information for as long as you have an active account. We may keep your information for up to 5 years after your deactivation of user account in our backup in order to maintain the integrity of our backup storage data as well as in order to address any appeals or requests pursuant to your purchases.
6. User’s Rights
6.1 You may request to:
- Obtain confirmation if your Information is processed, access Information about you that we had stored as well as supplementary information.
- Receive a copy of Information on you that is held by DesignScan in a structured, commonly used and machine-readable format.
- Correct your Information.
- Have your Personal Information deleted.
- Object to the processing of Information by DesignScan.
- Restrict the processing of your Information by DesignScan.
- File a complaint with a supervisory authority.
6.2 These rights might be limited if they are subject to DesignScan’s own legitimate interests and regulatory requirements.
6.3 Contact us at email@example.com to exercise of your rights. We will exercise them within 30 days after receipt. It may take us up to 90 days in some cases, for example for full erasure of your Personal Data stored in our backup systems. We will let you know if we need more time and explain the reasons for the delay.
7. Cookies and similar technologies
7.1 Cookies help us optimize and improve the user experience of the Site by helping us deliver crucial functionalities. The cookies we use may vary over time as we continuously update and improve our Site.
8. Third Party Websites, Services, and Cookies
8.1 The Platform or e-mails may contain links to other external websites that do not fall under our domain. We are not responsible for the privacy practices or the content of such external websites. If you choose to follow such links to external websites, you do so at your risk.
8.2 You can manage your cookies preferences at any time. This is done in your browser or device settings. Depending on which browser and device you use you may be able to control which cookies you allow, which cookies you want to block in the future, and delete cookies. For more information about these settings visit your browser or device´s help page. Note that some of DesignScan’s Services might not work as intended if you choose to disable cookies.
10. Contact Information