Thank you for your interest in our company. Data protection is very important to the management of Grind Fibers OU. The Grind Fibers OU website can generally be used without providing any personal data. However, if the data subject wishes to use special services of our company through our website, the processing of personal data may be required.
As a controller, Grind Fibers OU has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, data transmission over the Internet can usually have security holes, so absolute protection cannot be guaranteed. For this reason, each person concerned is free to transfer personal data to us by alternative means, for example, by telephone or by mail.
Grind Fibers OU is the operator of these pages and takes personal data protection into account. We do this in accordance with the statutory data protection regulations as well as this data protection declaration. You can browse our website without providing personal information. You can voluntarily provide data such as name, address or email addresses, but these data will not be used or shared with third parties without your explicit consent.
Grind Fibers OU’s data protection statement is based on the terms used by the European legislator for directives and regulations when adopting the General Data Protection Regulation (GDPR). Our data protection declaration must be easy to read and understandable for the public, as well as for our customers and business partners. To verify this, we would like to clarify the terms used in advance.
In this privacy statement, we use the following terms:
- a) personal data
Personal data is all information that relates to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable who, directly or indirectly, in particular through the assignment of an identifier, such as a name, an identification number, location data, an online identifier or one or more special characteristics by which a physical, physiological, genetic, psychological, economic, cultural or social identity of this individual.
- b) data subject
The person concerned is any identified or identifiable natural person whose personal data are processed by the controller.
- c) processing
Processing is any process performed with or without automatic procedures or any such series of processes in relation to personal data, such as collecting, recording, organizing, organizing, storing, adapting or modifying, reading, requesting, using, disclosing by transmission, distribution or any other form of providing, comparing or linking, limiting, deleting or destroying.
- d) restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
- e) profiling
Profiling is any type of automated processing of personal data, which consists of the use of this personal data to assess certain personal aspects related to an individual, in particular aspects related to work performance, economic situation, health, personal data. To analyze or predict the preferences, interests, reliability, behavior, location or relocation of this individual.
- f) pseudonymization
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that personal data cannot be assigned to an identified or identifiable natural person.
- g) controller
The controller or the person responsible for the processing is the natural or legal person, public authority, agency or other body that, alone or jointly with others, decides on the purposes and means of processing personal data. If the purposes and means of this processing are determined by Union law or the law of the Member States, the responsible person or specific criteria for his appointment may be provided in accordance with Union law or the laws of the Member States.
- h) processors
A processor is a natural or legal person, body, institution or other body that processes personal data on behalf of the controller.
- i) recipient
The recipient is the natural or legal person, body, institution or other body to whom personal data is disclosed, whether it is a third party or not. Authorities that may receive personal data as part of a specific investigation in accordance with EU legislation or the legislation of the Member States are not considered recipients.
- j) third party
A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorized to process personal data, under the direct responsibility of the controller or processor. …
- k) consent
Consent is any voluntary, informed and unambiguous statement of intent given by an interested person in a specific case in the form of a statement or other unambiguous positive action by which the person concerned indicates that he or she consents to the processing of his personal data.
Name and contact details of the person responsible for the processing
The controller in the sense of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, as well as other provisions related to data protection is:
Grind Fibers OU
Randvere tee 115, Pirita linnaosa,
Tallinn, Harju maakond, 11913, Estonia
Tel.: +371 28330984
By using cookies, Grind Fibers OU is able to provide the users of this website with a better experience that would not be possible without the setting of cookies.
Collection of general data and information.
The Grind Fibers OU website collects a number of general data and information each time it is accessed by a data subject or an automated system. This general data and information is stored in the server log files. (1) the types and versions of browsers used, (2) the operating system used by the access system, (3) the website from which the access system reaches our website (the so-called referrer), (4) subsidiary websites that accessible through the access system on our website, it is possible to control, (5) the date and time of access to the website, (6) Internet protocol address (IP address),
Using this general data and information, Grind Fibers OU does not draw any conclusions about the person concerned. Rather, this information is required to (1) correctly deliver the content of our website, (2) optimize our website content and advertisements for it, (3) ensure the long-term functionality of our information technology systems and our website’s technology, and (4 ) to provide law enforcement agencies with information required by law enforcement agencies in the event of a cyber attack. Therefore, this anonymously collected data and information is processed by Grind Fibers OU, statistically, in order to improve the protection and security of data in our company, in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files are kept separate from all personal data provided by the data subject.
Website communication options
In accordance with legal regulations, the Grind Fibers OU website contains information that allows you to quickly contact our company electronically and contact us directly, including a general address for the so-called e-mail (e-mail address). If the person concerned contacts the controller by e-mail or via the contact form, the personal data transmitted by that person will be automatically stored. Such personal data, voluntarily transferred by the data subject to the person responsible for the processing, is stored for the purpose of processing or communicating with the data subject.
Regular deletion and blocking of personal data.
Grind Fibers OU processes and stores the personal data of the person concerned only for the period of time necessary to achieve the purpose of storage, or if this is provided for by European directives and regulations or by another legislative body in laws or regulations for which the controller is responsible for the data processing.
If the storage purpose is no longer valid or the storage period prescribed by European directives and regulations or another responsible legislator expires, personal data will be regularly blocked or deleted in accordance with the provisions of the law.
Data subject rights
Each data subject has the following rights in relation to the processing of his personal data:
- a) Right to information
- b) Right to rectification
- c) Right to erasure (right to be forgotten)
- d) Right to restriction of processing
- e) Right to data portability
- f) Right to object to processing
- g) Right to revoke consent under data protection law
If the person concerned wishes to assert one of the aforementioned rights, they can contact the data protection officer of Grind Fibers OU at any time.
In addition, the data subject has the right to lodge a complaint with the data protection supervisory authority.
Legal basis for processing
Article 6 covers the DS-GVO serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, such as in the case of processing operations necessary for the delivery of goods or the provision of other services or refunds, the processing is based on Art.6 I lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company has a legal obligation that requires the processing of personal data, for example in order to fulfill tax obligations, the processing is based on Art.6 I lit. C GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This could happen, for example, if a visitor to our company was injured and their name, age, health insurance details, or other sensitive information had to be shared with a doctor, hospital or other third party. The processing will then be based on Art.6 I lit d GDPR. Ultimately, processing operations can be based on Art.6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are especially allowed to carry out such processing operations because they have been specifically mentioned by the European legislator. In this respect, he was of the opinion that a legitimate interest can be presumed if the person concerned is the customer of the responsible person (statement 47 sentence 2 of the GDPR). if the processing is necessary to protect the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the person concerned do not prevail. We are especially allowed to carry out such processing operations because they have been specifically mentioned by the European legislator. In this respect, he was of the opinion that a legitimate interest can be presumed if the person concerned is the customer of the responsible person (statement 47 sentence 2 of the GDPR). if the processing is necessary to protect the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the person concerned do not prevail. We are especially allowed to carry out such processing operations because they have been specifically mentioned by the European legislator. In this respect, he was of the opinion that a legitimate interest can be presumed if the person concerned is the customer of the responsible person (statement 47 sentence 2 of the GDPR).
Legitimate interests in data processing pursued by the controller or a third party.
If the processing of personal data is based on Art.6 I lit. F GDPR, it is our legitimate interest to conduct our business for the benefit of all our employees and our shareholders.
Personal data storage period.
The criterion for the duration of the storage of personal data is the respective statutory storage period. After the deadline, the relevant data is usually deleted, provided that it is no longer required to fulfill or initiate a contract.
Legal or contractual provisions for the provision of personal data; The need to conclude a contract; Obligation of the data subject to provide personal data; possible consequences of failure to provide
We explain to you that the provision of personal data is partly required by law (for example, tax regulations) or may also be the result of contractual provisions (for example, information about a counterparty). In order to conclude a contract, it may sometimes be necessary for the data subject to provide us with personal data, which we must subsequently process. For example, the person concerned is obliged to provide us with personal data when our company concludes a contract with them. Refusal to provide personal data will mean that the contract cannot be concluded with the person concerned. Before the person concerned provides personal data, they must contact one of our employees.
Availability of automated decision making.
As a responsible company, we do not use automated decision making or profiling.
This website uses functions of the web analytics service Google Analytics. Provider – Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are saved on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Article 6 paragraph 1 lit. F GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting the appropriate software in your browser; However, we would like to point out that in this case you may not be able to use all the functions of this website to the fullest. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and processing this data by Google by downloading the browser plug-in available from the following link and installing: https: / /tools.google.com/dlpage/gaoptout ?.
Objection to data collection
You can prevent the collection of data by Google Analytics by clicking the link below. An opt-out cookie will be set to prevent the collection of your data on future visits to this website: Deactivate Google Analytics.
You can find more information on the processing of user data by Google Analytics in Google’s data protection statement: https://support.google.com/analytics/answer/6004245?hl.
Processing order data
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the Estonian / Latvian data protection authorities when using Google Analytics.