.svg)
This privacy policy regulates the principles concerning the collection, processing and storage of personal data when visiting the website of Windy OÜ www.kristeltuul.com and when purchasing online courses, products and using the services on the website.
Personal data is collected, processed and stored by the chief processor of personal data Windy OÜ (hereinafter data processor).
For the purposes of the Privacy Policy, a data subject is a customer of the data processor or another natural person whose personal data is processed by the data processor.
For the purposes of the Privacy Policy, a customer is anyone who purchases products or services from the data controller's website.
The data processor follows the principles of data processing provided by the legislation in force in the country where it is located, among other things, it processes the customer's personal data legally, fairly and securely. The data processor may process the personal data of the data subject outside the country where the data subject is located. The data controller is able to confirm that the personal data have been processed in accordance with the legislation of the country where it is located.
Kristel Tuul's products and services are for informational purposes only and only as a self-help tool for the client. Kristel Tuul does not provide medical advice. The information provided by Kristel Tuul is not intended to be used to diagnose or treat any health problems or conditions without consulting the client's physician.
When ordering products or services, the customer confirms that he / she has read, understood and agrees to the data controller's privacy policy in its entirety.
Kristel Tuul is a controller only if the customer purchases products or services directly from www.kristeltuul.com.
Personal data collected, processed and stored by the data controller are collected electronically, mainly via the website and e-mail.
The data processor collects personal data transmitted by the data subject, generated in the course of customer communication, generated during the service provision process, submitted by cooperation partners and the authorized processor (eg consultants) and collected from the web environment (incl. Public registers).
Special types of data submitted by the data subject will be processed, including handed over to the authorized processor, only on the basis of the personal signature given to the consent form.
By sharing their personal data, the data subject gives the data controller the right to collect, organize, use and manage personal data for the purposes defined in the Privacy Policy, which the data subject shares directly or indirectly by purchasing goods or services on the website.
The data subject is responsible for ensuring that the data provided by him or her is accurate, correct and complete.
The data subject is obliged to immediately notify the data processor of any changes in the submitted data.
The data processor is not liable for any damage caused to the data subject or third parties caused by the data subject's submission of false data or the submission of his or her data without the authorization of a third party.
The data controller may use the personal data of the users of the website www.kristeltuul.com and persons purchasing products from it for the following purposes, among others:
to administer the website, including monitoring the use of the page;
users to access the website;
to use the e-shop, including making payments;
to send e-mails, invoices and purchased products to the data subject;
to provide marketing messages and product information to website users.
The data processor may process the following personal data of the data subject:
name, telephone number and e-mail address;
product delivery address;
Bank account number;
cost of goods and services and data related to payments (purchase history);
customer support details.
The legal basis for the processing of personal data is the General Regulation on the Protection of Personal Data;
The data subject has consented to the processing of his or her personal data for one or more specific purposes;
The processing of personal data is necessary for the performance of a contract concluded with the participation of the data subject or for taking pre-contractual measures at the request of the data subject;
The processing of personal data is necessary for the fulfilment of a legal obligation of the controller;
The processing of personal data is necessary for the legitimate interest of the controller or of a third party unless such interest outweighs the interests of the data subject or the fundamental rights and freedoms for which personal data must be protected, in particular, if the data subject is a child.
The duration of the processing of personal data is determined according to the purpose of the processing:
Purpose of processing - security and safety
Maximum period of storage of personal data - according to the terms specified by law.
Purpose of processing - order processing
Maximum retention period of personal data - up to 5 years after the end of the business relationship.
Purpose of processing - ensuring the operation of e-store services
Maximum retention period of personal data - up to 5 years after the end of the business relationship.
Purpose of processing - customer management
Maximum retention period of personal data - up to 5 years after the end of the business relationship.
Purpose of processing - financial activities, accounting
Maximum period of storage of personal data - according to the terms specified by law.
Purpose of processing - marketing, incl. Web analytics
Maximum retention period of personal data - up to 5 years after the end of the business relationship.
The data processor has the right to share the personal data of customers with third parties, such as authorized data processors, accountants, transport and courier companies, companies providing transmission services. Windy OÜ is the chief processor of personal data.
When processing and storing the personal data of the data subject, the data controller shall implement organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.
In order to publish the results of the microbiome test, the data processor uploads the test results to the electronic environment created for this purpose, and the data subject can access the test results according to the sample instructions on the basis of an individual access code.
The data subject has the right to access and inspect his or her personal data.
The data subject has the right to receive information about the processing of his or her personal data.
The data subject has the right to supplement or correct inaccurate data.
If the data processor processes the personal data of the data subject on the basis of the data subject's consent, the data subject has the right to withdraw the consent at any time.
In order to exercise his / her rights and discover the possibility of misuse of personal data, the data subject can contact the data processor at me@kristeltuul.com
In order to protect his or her rights, the data subject has the opportunity to submit a complaint to the Data Protection Inspectorate.
The website www.kristeltuul.com uses different types of cookies to operate and develop the environment. Cookies are analysis tools used to collect data about how a visitor uses a website.
The data subject can opt out of cookies on the website they are visiting by changing the browser settings of their device.
The data subject confirms that he / she is aware that the products are not intended for the treatment or diagnosis of specific diseases, the data controller does not provide healthcare to the customer. Consumption of the products and following the recommendations from Kristel Tuul do not guarantee the prevention or cure of diseases.
These data protection conditions have been drawn up in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation). Protection Act and legislation of the Republic of Estonia and the European Union.
The data controller has the right to change the data protection conditions in part or in full by notifying the data subjects of the changes via the website www.kristeltuul.com.
