PROCESSING OF PERSONAL DATA AND PRIVACY POLICY

1. General Provisions

1.1. This Privacy Policy governs the principles of collection, processing, and storage of personal data. The controller of personal data for the online store www.lacshary.eu is Casanail OÜ, registration code 14135347, registered address: 13914, Estonia, Tallinn, Lasnamäe District, Läänemere tee 36-50, phone: +372 58201490, email: info@lacshary.eu (hereinafter referred to as “the Seller”).

1.2. A data subject, in the context of this Privacy Policy, is a customer or any other individual whose personal data is processed by the controller.

1.3. A customer, in the context of this Privacy Policy, is any individual purchasing goods or services from the controller’s website.

1.4. The controller adheres to the principles of data processing, including legality, fairness, transparency, and security. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.

2. Collection and Use of Personal Data

Personal data refers to information that directly or indirectly identifies you as an individual. We collect and process personal data to:

• fulfill contractual obligations (e.g., delivery of orders);
• contact you to clarify information;
• comply with legal requirements.

The collection of personal data may occur in the following ways:

2.1. By providing contact information on the website (e.g., name, postal address, phone number, email address, and preferred communication method).

2.2. Through cookies or user profiles. Cookies are used to analyze website usage, improve the performance of the online store, and offer personalized services. You can disable cookies in your browser settings.

2.3. When placing an order in the online store, including providing contact information and preferences related to purchases.

3. Use and Retention of Collected Data

3.1. Personal data is used for the following purposes:

• notifying customers about new products, promotions, and special offers;
• processing and delivering orders;
• fulfilling obligations to customers.

3.2. Customers can opt out of receiving newsletters at any time by clicking the unsubscribe link in an email or contacting us directly.

3.3. Personal data is retained:

• for marketing purposes, until the customer withdraws their consent;
• for order fulfillment, for 5 years from the last purchase;
• for accounting purposes, for 7 years as required by law.

3.4. Data may be shared with third parties (e.g., logistics companies, payment service providers) who are obligated to maintain data confidentiality.

3.5. Customers may withdraw their consent for data processing by submitting a request through our website or by email. Withdrawal does not affect the legality of data processing prior to withdrawal.

4. Protection of Personal Data

4.1. We implement all necessary measures to protect your data, including:

• encrypting data during payments;
• restricting access to data to authorized personnel only.

4.2. If you suspect unauthorized use of your data, please notify us immediately at info@lacshary.eu.

4.3. You have the right to:

• request a copy of your data;
• inquire how your data is used;
• transfer your data to yourself or a third party in a commonly used format;
• request the termination of data processing.

We respond to requests within 30 calendar days.

5. Cookies and Analytics

5.1. We use cookies to:

• ensure the proper functioning of the website;
• analyze user behavior to improve services;
• personalize advertisements.

5.2. You can manage cookie settings in your browser.

6. Privacy Policy Terms and Changes

6.1. By using our website or placing an order, you confirm that you have read and agree to this Privacy Policy.

6.2. We reserve the right to modify the terms of the Privacy Policy and will notify customers of any changes via email or website notifications. The current version is always available at www.lacshary.eu.

6.3. For all inquiries regarding this Privacy Policy, please contact us at info@lacshary.eu.

6.4. You have the right to contact the Data Protection Inspectorate or a court to protect your rights.