Privacy policy

1. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR), national data protection laws of the member states, and other data protection regulations is:

Printall AS
Tala 4
11415 Tallinn
Estonia
Tel: +372 6698 400
Email: printall@printall.ee
Website: www.printall.ee

2. General Information on Data Processing

2.1. Scope of Personal Data Processing
We process personal data of our users only to the extent necessary for the operation of the website and the provision of our content and services. Processing of users’ personal data takes place only with their consent, except where prior consent cannot be obtained for practical reasons and processing is permitted by law.

2.2. Legal Basis for Personal Data Processing
If we obtain consent from the data subject for processing personal data, the legal basis is Article 6(1)(a) GDPR. If processing is necessary for the performance of a contract to which the data subject is party, the legal basis is Article 6(1)(b) GDPR. The same applies to processing operations necessary prior to entering into a contract. If processing is necessary for the legitimate interests of our company or a third party and such interests are not overridden by the data subject’s rights and freedoms, the legal basis is Article 6(1)(f) GDPR.

2.3. Data Deletion and Storage Period
Personal data of the data subject will be deleted or made inaccessible as soon as the purpose of storage ceases to apply. Longer storage is possible where required by EU or national laws applicable to the controller. Data will also be deleted or anonymized once legally prescribed retention periods expire, unless the data is still required for contract performance or initiation.

3. Website Access and Log Files

3.1. Description and Scope of Data Processing
Each time the website is accessed, our system automatically collects data and information from the computer accessing it. The following data is collected:

  1. Browser type and version
  2. User’s operating system
  3. User’s internet service provider
  4. IP address
  5. Date and time of access
  6. Pages visited on our site

3.2. Legal Basis for Processing
The legal basis for temporary storage of data and log files is Article 6(1)(f) GDPR.

3.3. Purpose of Data Processing
Temporary storage of the IP address is necessary to deliver the website to the user’s computer. Log files ensure the functionality and security of the website and IT systems. Data is not analyzed for marketing purposes.

3.4. Duration of Storage
Data is deleted as soon as it is no longer necessary for its purpose. Data collected for website operation is deleted at the end of the session. Log files are deleted no later than seven days after collection, unless longer storage is needed; in such cases, IP addresses are anonymized.

3.5. Right to Object and Removal
Collecting data for website operation and storing it in log files is essential. Therefore, the user has no right to object.

4. Use of Cookies

4.1. Description and Scope of Data Processing
Cookies are used to enhance usability. Some features require the browser to be identifiable after a page change. No personal data is collected.

The following cookies are used:

  1. cookie_notice_accepted: Tracks whether the user has accepted the cookie notice
  2. ip2location_redirection_first_visit: Identifies whether the user has visited the site before to serve content in their language
  3. pll_language: Remembers the user’s selected language

Cookie lifetime: up to 1 year

We also use cookies to analyze user behavior:

  • _ga: Unique Google Analytics ID | Expires in 2 years
  • _gat: Throttles request rate
  • _gid: Unique Google Analytics ID | Expires in 24 hours

Data is pseudonymized and cannot be traced back to individual users. No data is stored alongside other personal data. Users are informed of this via a cookie banner.

4.2. Legal Basis for Data Processing
The legal basis for processing personal data through technically necessary cookies is Article 6(1)(f) of the GDPR.
The legal basis for processing personal data through cookies for analytical purposes, provided the user has given consent, is Article 6(1)(a) of the GDPR.

4.3. Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of the website for users. Some website functions cannot be provided without the use of cookies. These cookies require the browser to be recognized even after a page change.

Cookies are needed for the following purposes:

  1. cookie_notice_accepted – a standard cookie used to determine whether to show the cookie usage notice to the user.
  2. ip2location_redirection_first_visit – a standard cookie used to check whether the website has been accessed from the browser before. Based on this, the content is shown in a detected language instead of default (English).
  3. pll_language – a standard cookie used to display the website content in the language last selected by the user.
    Maximum cookie lifespan: 1 year

User data collected via technically necessary cookies is not used to create user profiles.
Analytical cookies are used to improve the quality and content of our website. They help us understand how the website is used, enabling continuous optimization of our offering.

The following data may be transmitted in this process:

  • _ga: A unique identifier from Google Analytics to identify the user (consisting of a client ID and timestamp) | Standard expiration: 2 years
  • _gat: A parameter used by Google Analytics to limit the frequency of requests
  • _gid: A unique identifier from Google Analytics to identify the user (client ID and timestamp) | Standard expiration: 24 hours

4.4. Duration of Storage, Right to Object, and Deletion
Cookies are stored on the user’s computer and transmitted to our website. Therefore, you as the user have full control over cookie usage. You can disable or restrict cookies by changing your browser settings. Already stored cookies can be deleted at any time—this can also be automated.
If cookies are disabled for our website, some of its functions may no longer be available.

5. Transfer of Personal Data to Third Parties

5.1. Website Operator
When fulfilling an order, personal data is transferred to the agency and technical service provider contracted to manage the website. This processing is covered by a service agreement with the provider.

5.2. YouTube Videos
Our website includes individual YouTube videos that are stored on YouTube’s servers and embedded on our pages. A video is only embedded when the corresponding option is enabled in the extended privacy settings. When the video is played, YouTube and DoubleClick cookies are stored on your device, and data may be transmitted to the provider, Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA.

When playing embedded videos from YouTube, at minimum the following data is currently transmitted to Google Inc., operator of YouTube and the DoubleClick network: your IP address and cookie ID, the specific page you accessed on our site, the system date and time of access, and information about your browser. This data is transmitted regardless of whether you have a Google account or are logged in. If you are logged in, Google may link this data directly to your account. To prevent such association, you must log out of your Google account before clicking play.

YouTube or Google Inc. stores this data as user profiles and may use it for advertising, market research, and/or the design of their websites based on user needs. Such analysis may be performed even for users who are not logged in—primarily to deliver personalized ads and inform other users of your activity on our website. You have the right to object to the creation of such user profiles; objections must be directed to Google as the operator of YouTube.

5.3. Google Maps
This website uses the Google Maps mapping service provided by Google Inc. By using this website, you consent to the automated collection, processing, and use of data by Google and its representatives.
Google Maps Terms of Service
You can find more information about the purpose and scope of data collection and how Google uses this data in their privacy policy.

5.4. Website Analytics and Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze website usage. This service uses cookies—text files stored on your device. Data collected through these cookies is generally sent to and stored on Google servers in the United States.

This website uses IP anonymization. Within member states of the EU and the European Economic Area, users’ IP addresses are truncated. This prevents the IP address from being linked to a specific individual. Under a data processing agreement between the website operator and Google Inc., Google uses this data to analyze usage of the website, compile reports on activity, and provide related services.

You can prevent cookies from being stored by adjusting your browser settings. However, if cookies are disabled, you may not be able to use all website features without limitation.

Additionally, you can prevent data (including your IP address) collected by cookies from being sent to and processed by Google Inc. by installing a browser plugin available at: tools.google.com/dlpage/gaoptout

You can also opt out of data collection by Google Analytics by clicking the following link. An opt-out cookie will be set to prevent your data from being collected during future visits to this website.

Disabling Google Analytics
More information on data collection by Google Inc. is available here: https://support.google.com/analytics/answer/6004245?hl=en

6. Rights of the Data Subject

Under the EU General Data Protection Regulation (GDPR), you have the following rights. If your personal data is being processed, you have the right to obtain information about the data stored about you.
If there are inaccuracies in your personal data, you have the right to have them corrected (Article 16 GDPR).
Where the legal grounds exist, you may request the deletion or restriction of your data, and you also have the right to object to its processing (Articles 17, 18, and 21 GDPR).
If you have consented to data processing or entered into a contract regarding data processing and the processing is carried out by automated means, you also have the right to data portability (Article 20 GDPR).

When you exercise the rights mentioned above, Printall AS will verify whether the legal conditions for doing so are met.

You may submit data protection complaints to the relevant supervisory authority.

Estonia

Andmekaitse Inspektsioon
Väike-Ameerika 19
10129 Tallinn
Telephone: +372 5620 2341
Email: info@aki.ee
Web: http://www.aki.ee/en

Germany

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstraße 30,
D-53117 Bonn
Telephone: 0228 99 7799 – 0
Fax: 0228 99 7799 – 550
Email: poststelle@bfdi.bund.de
Web: http://www.datenschutz.bund.de