Protection of personal data

Personal data is data that Libracraft collects to provide a service, to identify an individual, to contact an individual to provide a service, or to resolve issues.
Libracraft is committed to protecting the personal data and privacy of its customers and users. Libracraft's activities on the Internet are in compliance with all relevant activities and relevant European Union legislation and the laws of the Republic of Estonia, including Regulation (EU) 2016/679 of the European Parliament and of the Council. Libracraft takes all precautions (including administrative, technical and physical measures) to protect the personal data collected. Access to modify and process data is restricted to authorised persons.

Security

All personal information disclosed during your visit to the Libracraft website and purchases made in the account management environment will be treated as confidential information. An encrypted data communication channel with banks ensures the security of the personal data of the purchaser and bank records.

Libracraft implements all security measures (including physical, IT and organisational) to protect the personal data processed. Access to personal data is restricted to authorised persons and personal data of all Libracraft customers is treated as confidential information.

What data is collected?

information you provide when you register as a loyal customer or e-shop user (including your first and last name, email address, postal address, purchase history);

information you provide to us in connection with ordering goods/services and e-mail communications;

other information you provide to Libracraft.

The following non-personal information is collected about the visitor when visiting the Libracraft e-shop:

information on how to use the e-shop (including. IP address, geographic location, browser type and version, operating system, reference source, length of visit, page views, website navigation, time and date of visit and other statistics. In addition, we may use third party services such as Google Analytics, Hotjar, Facebook Pixel to collect, track and analyse information about your interactions with us or in relation to our e-shop, including information about products and services you have purchased from us;

Data is collected on visits and stays on the website in order to improve the website and make it more convenient for visitors.

For the purpose of processing the data of legal persons, we collect the company name, registration number, VAT registration number, address, e-mail addresses for contacting and invoicing, the names of the contact persons representing the company and their e-mail addresses and contact telephone numbers.

In case of payment for services via credit card or bank linking service, only Payment Centre AS has access to the bank card information and bank details, which only issues information to Libracraft about the successful payment. 

Use of personal data

Libracraft may use your personal information for the following purposes:

for the performance of a sale and purchase contract

to manage your e-shop;

to tailor your e-shop to your needs;

to enable you to access and use the services of the e-shop;

ship the products you have purchased by sharing your delivery address with logistics partners;

to send notifications, pay bills and receive payments;

to send you the notifications you want by e-mail;

deal with enquiries, feedback and complaints you send us about our goods;

to send you periodic emails about new products, special offers or other information that we think may be of interest to you, using the email address you have provided;

as well as to use your personal information to contact you to request permission to use/share your shopping experience in our marketing or sales materials.

How long will the collected data be stored?

The data of persons who have registered as loyal customers of Libracraft is stored indefinitely. The data collected on the Libracraft e-shop's non-personalized technical website will be stored indefinitely.
Personal data relating to personalised enquiries and/or transactions will be retained for up to 7 years from the last interaction with the service provider, due to the obligation under the Accounting Act to prove transactions.
Interaction includes responding to direct marketing by viewing or clicking on a link.

To whom can the collected data be transferred?

Libracraft is the data controller. Personal data processed by Libracraft may only be disclosed without the consent of the individual to an authority or person who has a direct legal right (such as a court or a pre-trial procedure) and a justified need to do so.
Personal data processed by customers in the context of Libracraft purchases is treated as confidential and the right to process, disclose or transfer such data is the sole responsibility of the data owner (the customer).
Libracraft provides technical assistance with data processing at the request of the client, but this does not change the ownership of and responsibility for the data.

If the customer who has joined the loyalty program has given his/her consent, Libracraft may disclose the customer's e-mail address to its partners in order to better serve the customer. All customers have the right to withdraw their prior consent at any time.

What rights does the person have to the data collected?

Right to access, rectify, stop processing.

Customers who have registered in the e-shop have the right to access, modify/update their personal data in the e-shop's account management environment. If the personal data is not editable, accessible, disclosed on the website, a request for access to or correction of the data should be submitted to us in an identifiable manner. Where possible, the data will be issued or corrected within 7 working days.

Loyal customers registered in Libracraft stores have the right to access, modify/update their personal data by sending a request by e-mail to libracraftest@gmail.com.
If you wish to opt-out of direct marketing offers, you can do so immediately via the link at the end of each marketing email sent. The change will take effect immediately.
If there is (no longer) a lawful basis for processing, disclosing or granting access to personal data, you can request the cessation or deletion of the processing, disclosure or access to the data. This should be done by submitting a request in an identifiable manner.

You have the right to request the cessation of the processing of your personal data or the rectification, erasure or blocking of your personal data at any time. Libracraft will carry out the relevant action within three working days at the latest from the date of the Client's written request.

If a customer believes that his or her rights have been violated by the processing of personal data, he or she has the right to contact Libracraft, the Data Protection Inspectorate or a court to request that the violation be stopped.

Privacy Policy terms and conditions and changes

By using the Libracraft website, you have read and agreed to these terms and conditions. We reserve the right to change the general terms and conditions of this Privacy Policy, if necessary, by notifying all related parties.

For any questions or concerns about our privacy policy or data processing, please contact us at libracraftest@gmail.com.