Privacy Policy

Definitions

Data Controller: a natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC

Personal Data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

Process or Processing: any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Website: means website published by https://oyepackaging.com or any related domain names.

Services: means any services offered or provided by ÖYE Packaging OÜ.

You or Your: any person using our Website or contacting us in order to make an inquiry with us.

Data Controller and contact

ÖYE Packaging OÜ (“We,” “Us,” “Our”), has its headquarters in Tallinn, Estonia shall be the Data Controller of your Personal Data.

Register code: 16760411

Legal address: Päevalille tn 6-15, 13517, Tallinn, Estonia

You can contact us by sending your inquiry to hello@oyepackaging.com

What Personal Data is collected by us

In order to provide services, we process the following Personal Data:

1. collected from visitors of our Website who browse or use our Website through cookies:
• IP Address: Collected when visiting our website.
• Browser Type: Type of browser used.
• Device Information: Details about the device used.
• Contact Information: Name, email address, and location if a message is sent.
2. collected from clients who contact us via forms made available by Us on Website, make an order pursuant to our Terms and Conditions, or contact us on our social media:
• Personal Information: Name, address, date of birth, phone number, and email address.
• Order Details: Type, order number, design, and quantity.
• Delivery Information: Address, contact information for delivery, and recipient details
• Payment Information: payment amount, billing address, transaction information

We process the Personal data when You visit the Our social networks (Facebook, LinkedIn, etc.). Such data is processed exclusively in connection with maintaining the profile, including informing You about Our activities and promoting various types of Services.
For the avoidance of doubt, Personal Data is not used for the purposes of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR.

Purpose of Data Processing

We Process Personal Data to ensure the effective operation, enhancement, and security of Our Services. Specifically:

1. We collect data to monitor website traffic, ensure security, and improve user experience by optimizing the website's compatibility, functionality, and display across different locations, browsers, and devices. Additionally, if you contact us, we use your information to respond to inquiries and provide customer support.
2. We collect data to identify and communicate with you, process and fulfill Your inquiries and orders accurately, ensure timely delivery, and handle payment transactions. This data is also used to comply with financial regulations and provide tailored customer services.

Legal Basis for Processing

We process your personal data in compliance with the GDPR, specifically under the following legal grounds:

Legitimate Interests (Article 6(1)(f) GDPR): We rely on Our legitimate interest:

• in maintaining and improving our Website, ensuring its security, and enhancing the user experience. This includes monitoring website traffic, optimizing the website’s functionality across different locations, browsers, and devices, and responding to user inquiries.
• in contacting You for the purpose of offering Services. This includes responding to inquiries, providing information about Services, and following up with potential or existing customers.
• Consent (Article 6(1)(a) GDPR): For Personal Data collected through forms, non-essential cookies and inquiries, we rely on Your explicit consent. This consent allows us to process Personal Data to communicate with You, respond to inquiries, and offer personalized services
• Contract (Article 6(1)(b) GDPR): We Process Personal Data as necessary for the performance of a contract. This includes fulfilling Your product orders, ensuring accurate and timely delivery, and processing payments. These activities are essential for providing the Services requested.
• Legal Obligation (Article 6(1)(c) GDPR): In some cases, we Process Personal Data to comply with legal obligations, such as those related to financial record-keeping and reporting requirements. This ensures Our compliance with applicable laws and regulations.

Data Sharing and Transfers

We share Personal Data with the following categories of recipients:

• Service providers. We use service providers for the delivery of our Website and Service. This includes different analytical services, hosting, delivery services;
• Professional consultants. We use professional consultants to receive accounting, legal, or similar services.
• Authorities. We may share personal data with governmental authorities when we are required to do so pursuant to the applicable law. For example, we may share Personal Data contained in invoices when local tax authorities require us to do so.

We may transfer Personal Data outside the territory of the European Economic Area, provided that any such transfer shall be subject to data processing agreement and appropriate or suitable safeguards.

Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including fulfilling orders and processing payments, and to comply with legal, accounting, or reporting obligations. We generally store Personal Data for the term of 1 year except for Personal Data necessary for fulfillment of our legal obligations. For accounting and tax purposes, under Estonian law, we are required to retain relevant financial records, including payment and invoicing information, for 7 years from the end of the financial year in which the transaction occurred.

Children's Online Privacy

We do not Process any Personal Data of children under the age of 18. Should we determine that any piece of Personal Data belongs to a child, we will immediately remove it from our systems.

Cookies and Tracking Technologies

Information about our cookies and other tracking technologies that we use is available in Our Cookies Policy.

Your rights

1. Access. You have the right to be informed about the Processing of Your Personal Data.
2. Rectification. You have the right to access Your Personal Data and request corrections if any inaccuracies are found. If your Personal Data is incomplete or outdated, You can request that it be updated or amended.
3. Erasure (“Right to be Forgotten”). You have the right to request the deletion of your personal data. We will erase Your data unless we have a legitimate reason to retain it.
4. Restriction on Processing. You have the right to request the restriction of processing your personal data. Exceptions as outlined in Article 18 of the GDPR may apply.
5. Data Portability. You have the right to request that your personal data be transferred to another organization or directly to you in a structured, commonly used, and machine-readable format.
6. Right to Withdraw Consent. You have the right to withdraw your consent to the processing of your personal data at any time. Once consent is withdrawn, we will cease processing your data unless there is a legal basis to continue processing without your consent.
7. Right to Object. You have the right to object to the processing of your personal data in certain situations, such as for direct marketing purposes or where the processing is based on our legitimate interests. If you object, we will stop processing your data unless there are compelling legitimate grounds for the processing.
8. Right to Lodge a Complaint. You have the right to lodge a complaint with the appropriate data protection authority if you believe that your personal data has been processed in a manner that violates your rights.

How to exercise Your Rights

To exercise any of your rights regarding your personal data, please contact us through the following channels:

Email: hello@oyepackaging.com

Postal Address: Päevalille tn 6-15, 13517, Tallinn, Estonia

Please include your name, contact details, and a detailed description of Your request. We may need to verify your identity before processing your request to ensure that Personal Data is protected. We will respond to Your request within the time frame required by applicable law, typically within one month, and may extend the response time to 60 days. If you withdraw your consent or exercise your right to object, this will not affect the lawfulness of processing based on your consent before its withdrawal.