Data protection conditions
DURIS LLC (we) are committed to protecting and respecting your privacy.
We respect your privacy and are committed to protecting your personal data. This Privacy Notice tells you how we look after your personal information when you visit our website (wherever you do so), participate in our competition or sales outlets, or join our marketing, loyalty or reward schemes. You can read about your privacy rights and how the law protects you in this Privacy Notice.
DURIS OÜ’s website is not intended for children and we do not knowingly collect any information relating to children.
It is important to read this Privacy Notice in conjunction with any other privacy notices or fair processing notices we may provide in specific circumstances when we collect or process your personal information so that you are fully aware of how and why we use your personal information. This Privacy Notice supplements other notices and is not intended to override them.
It is important that the personal information we hold about you is accurate and valid. Please let us know if your personal information changes during the course of your relationship with us.
Data Controller
DURIS OÜ is the controller and is responsible for your personal data.
Our contact details
DURIS OÜ is a limited liability company with the registration code 12873354 and its registered office at Kotlepi tn 28, 13516 Tallinn, Estonia.
The DURIS OÜ website may contain links to third party websites, plug-ins and applications. Clicking on these links or enabling these connections may allow third parties to collect or share information about you. We have no control over such third party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of each website you visit.
Personal data we collect about you
We may collect, use, store and transfer various types of personal information about you and process the following information about you:
- Identity information – such as your first name, maiden name, surname, username or similar identifiers, marital status, job title, date of birth and gender;
- contact details – e.g. your postal address, email address and telephone numbers;
- financial information – e.g. your bank account and payment card details;
- Transaction information – for example, information about payments to and from you and other information about products and services you have purchased from us;
- technical information – for example, the information we receive when you visit our website, your browser type and version, time zone setting and your location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to visit our website;
- profile information – e.g. your username and password, orders you have placed, your interests, preferences, feedback and survey responses;
- User information – includes information about how you use our website and services;
- any other information about you that you may give us;
- marketing and communications – covers your preferences for receiving marketing information from us.
If you do not provide us with your personal information when we are required to collect it by law or under the terms of a contract between us and you, and you do not provide it when we request it, we may not be able to perform a contract we have with you or are trying to enter into with you (for example, to provide you with our services). In such a case, we may be forced to cancel the product or service you are using, but we will let you know when this happens.
How we collect your personal data
We use the different methods listed below to collect information from and about you.
The information you provide to us.
You may provide us with information about yourself when you fill out forms on our website ww.duris.ee, when you register or visit us at our location, or when you contact us by phone, email or otherwise. This includes information you provide when you register to use our website, order our services, search for a product, place an order on our website, participate in chat panels or other social media channels on our website, enter a contest, sales promotion, or survey, report a problem on our website, or join a marketing, loyalty, location, or prize scheme.
The data we collect about you.
- When you visit our website, we may automatically collect the following information:
- computer information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login details, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. We collect this personal information using cookies and similar technologies. For more information, please see our Cookie Policy.
- information about your visit, including full internet address (URL) tracking information to, through and from our website (including date and time); products you viewed or searched for; page response times, download errors, length of time spent on certain pages, page interaction information (such as scrolls, clicks and mouse over) and methods used to leave the page, and the telephone number used to call our customer service number.
Information we get from other sources.
We may also receive information about you when you use other websites operated by us or other services we provide. In such cases, we will inform you when we collect such information that it may be shared internally and combined with information collected from this website. We also work closely with third parties (including, for example, business partners, technical, payment and delivery subcontractors, advertising networks, analytics providers, search information providers, credit agencies) and may receive information about you from them.
We also collect, use and share aggregated data, such as statistical or demographic data, for any purpose. Aggregate data may be derived from your personal information, but it is not considered personal data by law because it does not directly or indirectly reveal your identity. For example, we may aggregate certain of your usage data to calculate the percentage of users who value a particular website feature. However, if we combine or aggregate information with your personal information so that you can be directly or indirectly identified, we will treat the combined information as personal information used in accordance with this Privacy Notice.
We do not collect special categories of personal information about you (this includes details about your racial or ethnic origin, religious or political beliefs, sex life, sexual orientation, trade union membership, your health and genetic and biometric data). We also do not collect information about convictions and offences.
How we use your personal data
We use information about you to provide our services in a number of ways:
- to administer and protect our business and website, including troubleshooting, usage monitoring and control;
- data analysis, system maintenance and support, and survey processing;
- to register new customers of our company who have joined our website or our app or opened an account through our website;
- for processing orders, including managing payments and fees;
- to perform our obligations under any agreements between you and us and to provide you with information about the products and services you request from us;
- to provide and improve our services to you;
- to notify you of changes to our services, terms and conditions or privacy policy;
- to provide you with relevant website content and advertisements, and to measure and understand the effectiveness of the advertising being delivered;
- to ensure that the content on our website and/or our app is presented in the most effective way for you and your computer;
- to make suggestions and recommendations that may be of interest to you.
We will use your personal data on the following grounds:
- to perform a contract, such as hiring an individual to provide our services;
- to meet legal and regulatory requirements.
- Where it is necessary for our (or a third party’s) legitimate interests and your interests, and fundamental rights do not override those interests, for example:
- to keep our records up to date and to find out how our customers use our products and services;
- to develop our products and services and grow our business;
- to inform and update our marketing strategy;
- for the purposes of our business, administrative and IT services, network security, fraud prevention and in the context of business restructuring or in the course of a group reorganisation).
Marketing
In general, we do not rely on consent as a legal basis for processing your personal data, except for sending you direct marketing material by email. If you receive marketing communications from us and no longer wish to receive them, you can unsubscribe at any time by emailing us at contact@duris.ee.
We will obtain your explicit consent before sharing your personal data for marketing purposes with companies outside DURIS OÜ.
You may receive marketing information from us if you have requested information from us or purchased goods from us, or if you have provided us with your details when joining a competition or registering for a promotion, you have consented to receive such marketing information.
You may at any time ask us or third parties to stop sending you marketing communications by sending an email to contact@duris.ee.
Change of target
We will only use your personal information for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is consistent with the original reason.
If we need to use personal data for any other reason, we will inform you and explain the legal basis on which we may do so.
Please note that we may process your personal data without your knowledge or consent in accordance with the above rules where required or permitted by law.
Sharing your personal data
We may need to share your personal information with certain trusted third parties in accordance with our contractual obligations with them and to assist us in providing our services, including:
- customer relationship managers and business partners, suppliers and subcontractors to perform contracts with them or with you;
- analytics and search engine providers who help us improve and optimise our website;
- to third parties to whom we may decide to sell or transfer our business or assets, or with whom we may decide to merge parts of our business. Alternatively, we may seek to acquire or merge with other businesses. If there is a change in our business, your personal information will be used by the new owners in the same way as stated in this Privacy Notice.
- If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms of use or other terms, conditions, agreements and other arrangements, or to protect the rights, property or safety of DURIS LLC, our customers and others. This includes exchanging information with other companies and organizations to protect against fraud and reduce credit risk.
How we protect your personal data
We have put in place appropriate security measures to protect your personal information from accidental loss, use or unauthorised access, alteration or disclosure. In addition, we restrict access to your personal information to those employees, agents, contractors and other third parties who have a business need to know it. They will only process your personal information in accordance with our instructions and will have a duty of confidentiality.
We have procedures in place to deal with suspected personal data breaches, and we will notify you and the appropriate regulatory authority of a breach if required to do so by law.
How long we keep your personal data
We will keep your personal data for as long as necessary to fulfil the purpose for which it was collected.
To determine the appropriate retention period for your personal data, we take into account the amount, nature and sensitivity of the personal data, the risk of potential harm from unauthorised use or disclosure, the purposes for which we process your personal data and whether we can achieve the purposes in any other way. We will also take into account legal and regulatory requirements to retain personal data for a minimum period of time, limitation periods for bringing legal proceedings, good practice and the overall business objectives of DURIS LLC.
International transfers of your personal data
We do not transfer your personal data outside the European Economic Area.
Your rights regarding your personal data
You have certain rights under the EU General Data Protection Regulations and other data protection laws in relation to your personal data. You can:
- request access to your personal data and how we process it;
- request the rectification of your personal data held by us;
- ask us to delete your personal data;
- object to us processing your personal data;
- request the restriction of the processing of your personal data;
- request the transfer of their personal data to you or to a third party;
- withdraw consent at any time if we rely on consent to process your personal data. However, this does not affect the lawfulness of the processing that took place before the withdrawal. If you withdraw your consent, we will not be able to provide our services to you. We will advise you if this is the case at the time of the withdrawal of your consent. Please note that, even after you have decided to withdraw your consent, we may continue to process your personal data to the extent necessary or otherwise permitted by law, in particular in connection with the exercise and protection of our legal rights or the performance of our legal and regulatory obligations.