This privacy policy applies between you, the User of this Website and Mallstan, the owner and provider of this Website. Mallstan takes the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website. Please read this privacy policy carefully.
Definitions and interpretation
1. In this privacy policy, the following definitions are used:
Data: collectively all information that you submit to Mallstan via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Act 1998;
Cookies: a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies);
Mallstan, or us: Mallstan, a company incorporated in Estonia with registered number 14422213 whose registered office is in Tallinn
EU Cookie Law: the Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011;
User or you: any third party that accesses the Website and is not either (i) employed by Mallstan and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Mallstan and accessing the Website in connection with the provision of such services; and
Website: the website that you are currently using, www.mallstan, and any sub-domains of this site unless expressly excluded by their own terms and conditions.
2. In this privacy policy, unless the context requires a different interpretation:
- the singular includes the plural and vice versa;
- references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy;
- a reference to a person includes firms, companies, government entities, trusts and partnerships;
- "including" is understood to mean "including without limitation";
- reference to any statutory provision includes any modification or amendment of it;
- the headings and sub-headings do not form part of this privacy policy.
Scope of this privacy policy
3. This privacy policy applies only to the actions of us and you with respect to this Website. It does not extend to any websites that can be accessed from this Website including any links we may provide to other websites.
Data collected
4. We may collect the following Data, which includes personal Data, from you:
- Data you provide to us: The types of personal information that we collect directly from you may include:
- Name;
- Contact Information such as email addresses and telephone numbers.
- Data from Website use: The Website automatically collects information about how you and your device interact with it, including:
- IP address (automatically collected);
- Web browser type and version (automatically collected);
- Operating system (automatically collected);
- A list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected);
- in each case, in accordance with this privacy policy.
Our use of Data
5. For purposes of the General Data Protection Regulation (2016/679), Mallstan is the "data controller".
6. We will retain your personal Data for as long as necessary to provide the communication service and for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements.
7. Unless we are obliged or permitted by law to do so, and subject to any third party disclosures specifically set out in this policy, your Data will not be disclosed to third parties. This does not include our affiliates and / or subsidiaries and / or associates.
8. All personal Data is stored securely in accordance with the principles of the General Data Protection Regulation (2016/679). For more details on security see the clause below (Security).
9. General Data Protection Regulation (2016/679) says that we can only use your personal information if we have a proper reason to do so. This includes sharing your data with third parties.
10. Any or all of your Data may be required by us from time to time to provide you with the best possible service and experience when using our Website. Specifically, Data may be processed by us for the following reasons:
- Improvement of our products / services;
- Transmission by email of promotional materials that may be of interest to you;
- Contact for market research purposes which may be done using email, telephone, fax or mail. Such information may be used to customise or update the Website;
- Administer your interaction with us;
- Responding to your enquiries;
- Provide you with information about us;
- Notify you about changes to our terms and conditions;
- For research and statistical analysis;
- Carrying out marketing activities;
- To communicate with you via social media or through our community;
- To respond to your complaints and seek to resolve them;
- In each case, in accordance with this privacy policy.
Grounds for processing
11. When we collect from you any personal information within the scope of GDPR, we do so (a) with your consent; (b) where necessary for our compliance with a legal obligation; and/or (c) as necessary to fulfill our legitimate interests as described below, except where our interests are overridden by your privacy rights. Where we rely on your consent to process personal information, you have the right to withdraw your consent at any time, and where we rely on legitimate interests, you have the right to object.
12. Our legitimate interests are to carry out marketing activities and communicate with you via social media or through our community.
Third party websites and services
13. We may, from time to time, employ the services of other parties for dealing with certain processes necessary for the operation of the Website. The providers of such services have access to certain personal Data provided by you when you use this Website.
14. Any Data used by such third parties is used only to the extent required by them to perform the services that we request. Any use for other purposes is strictly prohibited. Furthermore, any Data that is processed by third parties will be processed within the terms of this privacy policy and in accordance with the General Data Protection Regulation (2016/679).
Links to other websites
15. This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy of other websites prior to using them.
Changes of business ownership and control
16. We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Data provided by you will, where it is relevant to any part of our business being transferred, will be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us.
17. We may also disclose Data to a prospective purchaser of our business or any part of it.
18. In the above instances, we will take steps with the aim of ensuring your privacy is protected.
Controlling use of your Data
19. Wherever you are required to submit Data, you will be given options to restrict our use of that Data. This may include but is not limited to the following:
- use of Data for direct marketing purposes; and
- sharing Data with third parties.
20. The General Data Protection Regulation (2016/679) provides you other rights over your data including:
- the rectification or erasure of personal data
- the restriction of processing
- the right to data portability
- the right to object and automated individual decision-making
- the right to object
Functionality of the Website
21. To use all features and functions available on the Website, you may be required to submit certain Data.
22. You may restrict your internet browser's use of Cookies. For more information see the clause below (Cookies).
Accessing your own Data
23. You have the right to ask for a copy of any of your personal Data held by us (where such Data is held) free of charge, unless the requests are repetitive or excessive in which case a reasonable administrative charge may be requested. If you wish to exercise this right please contact us at the address included in this policy
Security
24. Data security is of great importance to us and to protect your Data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure Data collected via this Website.
25. If password access is required for certain parts of the Website, you are responsible for keeping this password confidential.
26. We endeavour to do our best to protect your personal Data. However, transmission of information over the internet is not entirely secure and is done at your own risk. We cannot ensure the security of your Data transmitted to the Website.
Cookies
27. This Website may place and access certain Cookies on your computer. We use Cookies to improve your experience of using the Website. We have carefully chosen these Cookies and have taken steps to ensure that your privacy is protected and respected at all times.
Transfers outside the European Economic Area
28. Data which we collect from you may be stored and processed in and transferred to countries outside of the European Economic Area (EEA). For example, this could occur if our servers are located in a country outside the EEA or one of our service providers is situated in a country outside the EEA. These countries may not have data protection laws equivalent to those in force in the EEA.
29. If we transfer Data outside the EEA in this way, we will take steps with the aim of ensuring that your privacy rights continue to be protected as outlined in this privacy policy. You expressly agree to such transfers of Data.
30. We may transfer your personal information to countries outside of the EEA (such as the United States of American) to carefully selected business partners that meet our standards. We do this for our data management and business purposes, in particular, for outsourced data processing by organisations on our behalf. We take reasonable steps to ensure your information is adequately protected. If you do not agree to this procedure you should not use our services.
General
31. You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.
32. If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.
33. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
34. This Privacy Policy will be governed by and interpreted according to the law of Estonia. All disputes arising under this policy will be subject to the exclusive jurisdiction of the courts of Estonia.
Changes to this privacy policy
35. We reserve the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. The most current version will posted on our Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations.
Contact us
36. You may contact us by email at support@mallstan.com