This is a description of how your personal data is collected, used, and deleted while you visit our website www.gelatex.com, or orders.gelatex.com, register for our newsletter, send us requests regarding our products through webform, apply to our open positions, and make purchases on our website.
The Controller of your personal data is the legal entity Gelatex Technologies OÜ, registry code 14145430, address Mahtra 30a, 13811, Tallinn, Estonia (“Gelatex”, “we”, “us”).
2. How do we get personal information?
The personal information we process is provided to us directly by you when you visit our website and fill in any of the web forms with personal data. You also provide us with personal data when you send us a job application with a CV and cover letter by e-mail.
When you order goods from our e-shop, we process your personal data in order to register your purchase, receive payments, and deliver the goods.
In addition, we may also collect your personal data indirectly. When visiting our website, we and our service providers may collect certain data using tracking technologies like cookies, web beacons, and similar technologies. The use of web cookies is described on our website in the cookie banner where you can also choose between cookie settings.
Indirectly collected data may fall under the terms of third-party privacy policies while they act as independent data controllers. Please read those separately.
3. What kind of data is processed and why?
4. Sharing your personal data
Any data you provide will not be publicly displayed or shared to other Users. Gelatex employees and business partners have access to personal data to the extent necessary for the performance of their work duties.
We use third party processors to help provide our service.
Why and with whom we share your personal data?
Some of our processing is cloud based so your personal information might be sent outside the European Economic Area. In such instances we will ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that appropriate contractual, technical, and organisational measures are in place.
5. Ensuring the security of personal data
We have taken necessary technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against the unauthorized disclosure, abuse or other processing in violation of applicable law.
6. Retention and deletion of personal data
The storage period of personal data depends on whether we have legal obligations to store data, contractual obligations, legitimate interest to provide best services or your explicit consent.
7. Your rights and preferences
Under data protection law, you have rights including:
Right to be informed and to access. You may get information regarding your personal data processed by us.
Right to data portability. You have the right to receive your personal data from us in a structured, commonly used, and machine-readable format and to independently transmit those data to a third party.
Right to erasure. You have the right to have the personal data we process about you erased from our systems if the personal data are no longer necessary for related purposes.
Right to object and restrict. You have the right to object to the processing of your personal data and restrict it in certain cases.
Right to rectification. You have the right to make corrections to your personal data.
Right to withdraw consent. When you have given us consent to process your personal data, you may withdraw said consent at any time.
To exercise any of the abovementioned rights, please contact firstname.lastname@example.org
We will respond to your requests within 30 days.
8. Other important information
Newsletter and direct marketing campaigns
We may send you our newsletters and marketing offers with your explicit consent. You may opt out of these messages. Please note that email marketing messages include an opt-out mechanism within the message itself (e.g., an unsubscribe link in the emails we send to you). Clicking on the link in an email will opt you out of further messages. We may also use social media tools to market our products and services. As social media and web analytics providers act as joint processors, there might be consent or opt-out requirements also on their side (Google Ads, Facebook Ads, LinkedIn).
If you have questions or concerns about our use of your personal information, please feel free to contact us at email@example.com. You may also lodge a complaint to the supervisory authority, the Estonian Data Protection Inspectorate, firstname.lastname@example.org
This Privacy Notice was updated on July 2023.