Privacy Notice of Capablefor OÜ
The processor of personal data is Capablefor OÜ (Mustamäe tee 121-43, Tallinn, reg. code: 14632330)
The privacy notice:
• explains what we do to protect and respect the privacy of your personal data;
• explains how we collect, use and protect your personal data;
• helps you understand how your personal data is collected and used and what your rights are regarding your personal data.
PRIVACY & COOKIES
At Capablefor OÜ we take the matter of visitor privacy very seriously. We see the effects of spam email every day in our inboxes and certainly don't wish any of our visitors. This is why any information we collect from you, either in the form of email sent to us or purchasing information will be protected. By entering a competition or downloading one of our eBooks, we may occasionally share this data with our 3rd party content collaborators or competition partners. We will always ask your permission and give you a clear option to opt out. We do not sell data.
We will comply with data protection law. Personal information we hold about you will be:
- Used lawfully, fairly and in a transparent way.
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
- Relevant to the purposes we have told you about and limited only to those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have told you about.
- Kept securely.
WHAT WE COLLECT
We may collect the following information:
- Information you give us. You may give us information when you contact us, register to use our site at www.testyourwill.com, place an order, enter a competition, promotion or survey, and when you report a problem. This may include your name, address, e-mail address and phone number, financial and credit card information, sport preference and marketing preferences.
- Information we collect about you. When you visit our site we may automatically collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, and browser information;
- •nformation about your visit to the site including traffic data, location data, web logs and other communication data.
- Information we receive from other sources. We may receive information about you from third parties (including business partners providing technical, payment and delivery services, advertising networks and analytics)
SECTION 1 - WHAT DO WE DO WITH YOUR INFORMATION?
We collect the following personal information from You:
- Contact Information such as name, email address, mailing address, phone number
- Billing Information such as name and billing address
As is true of most Web sites, we automatically gather information about your computer such as your IP address, browser type, referring/exit pages, and operating system.
We use this information to:
- Fulfill your order
- Send you an order confirmation
- Send you requested product or service information
- To monitor purchase history, site use and traffic patterns to improve our site design and products
- Send product updates
- Respond to customer service requests
- Administer your account
- Respond to your questions and concerns
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
SECTION 2 - CONSENT
How do you get our consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at email@example.com or mailing us at:
Test Your Will- Capablefor OÜ
Harju maakond, Tallinn, Mustamäe linnaosa,
E. Vilde tee 121-43 , 12614, Estonia
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 - SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 - COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
SECTION 8 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
What are Your rights?
Right of access - You have the right to obtain confirmation that your data is being processed and access to your personal data. You can make a request by email to firstname.lastname@example.org.
In most cases we will provide a copy of the information free of charge. However, we may charge a reasonable administration fee when a request is manifestly unfounded or excessive or to comply with requests for further copies of the same information although this does not mean that we will charge for all subsequent access requests.
We must without delay and in any event within 1 month of your request (subject to extensions in some cases):
- confirm what personal data we hold about you;
- provide a copy of the data in commonly used electronic form;
- provide any supporting explanatory materials.
We can extend the time to respond by a further two months where requests are complex or numerous. If this is the case, we will inform you of this within one month of the receipt of the request and explain why the extension is necessary.
Where requests are obviously unfounded or excessive we can refuse to respond. In such cases, we will, within one month, explain why and will inform you of your right to complain to our Supervisory Authority and to pursue a legal remedy.
Data portability – In addition to your access right you can require us to provide a copy of your information that we hold in a commonly used machine-readable format
Rights of Correction and Erasure (“right to be forgotten”) – You may ask us to correct or remove information you think is inaccurate.
Processing for marketing purposes - You may object, at any time, to the processing of your personal data for direct marketing purposes. When you register and every time we get in touch with you, we will offer you the opportunity to opt-out of any service to which you have subscribed. Any e-mail we send you will contain an easy automated opt-out.
Service emails: if you sign up to a promotion or competition that requires an email to complete your journey, or service you with a code or information, we will email you this even if you have opted out of marketing. This is the only email you will receive
Processing for our legitimate interest - You can object to any processing which is for our legitimate interests or those of a third party in which case, the processing must stop, unless there are compelling legitimate grounds for the processing which override your rights, or where the processing is necessary in relation to legal action.
You can raise an objection, withdraw consent or restrict processing by email to email@example.com.
Right to Complain - If you have any concerns with how we keep and use your information please contact our Data Protection Officer by email at firstname.lastname@example.org.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact us at email@example.com.
Test Your Will- Capablefor OÜ
Harju maakond, Tallinn, Mustamäe linnaosa,
E. Vilde tee 121-43, 12614, Estonia