Privacy Policy

Personal information.

Maxi Maja OÜ respects your privacy and declares that it will handle your personal data carefully and confidentially. This information will not be loaned, rented or sold in any way, nor made public or available to third parties in any way. Maxi Maja OÜ processes your personal data in accordance with applicable regulations. By providing your personal data through the website maximaja.com, you consent to the use of this data by Maxi Maja OÜ in accordance with these regulations

Maxi Maja OÜ, Harju maakond,Lasnamae linnaosa,Lootsa tn 5, 11415 Tallinn,NIP EE102309654

Registry number: 16093742, is responsible for the processing of personal data in accordance with this privacy statement.

Contact details.

www.maximaja.com, Harju maakond, Lasnamae linnaosa, Lootsa tn 5, 11415 Tallinn,

email: contact@maximaja.com

Personal data we process.

Maxi Maja OÜ processes your personal data because you use our services and/or because you provide them to us. Below you will find an overview of the personal data we process:

- Name and surname

- Address details

- Email address

- Phone number

- Other personal information that you actively provide, for example by creating a profile on this website, in correspondence and by telephone

Special and/or sensitive personal data we process.

Our website and/or service does not intend to collect data about website visitors who are under the age of 16. Unless they have the permission of a parent or guardian. However, we cannot verify whether a visitor is over the age of 16. Therefore, we advise parents to engage with their children's online activities to prevent the collection of data about children without parental consent. If you believe that we have collected personal data about a minor without such consent, please contact us at contact@maximaja.com and we will delete that information.

What are the purposes and legal bases, as well as the data storage period, for different categories of persons.

1. Purchasers of products at www.maximaja.com and persons who have registered an account.

Maxi Maja OÜ processes your personal data for the following purposes:

a) provision of the service in the form of a user account at www.maximaja.com,

b) performance of the sales agreement with the Customer (order) or taking action before concluding the agreement, at the Customer's request, expressed in any manner (Article 6, paragraph 1, letter b of the GDPR),

c) fulfillment of obligations arising from legal provisions, in particular accounting and tax provisions (Article 6, paragraph 1, letter c of the GDPR),

d) the purposes indicated in the content of consents to the processing of personal data - if such consents were expressed (Article 6, paragraph 1, letter a of the GDPR),

e) conducting marketing activities, which constitutes the implementation of the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR),

f) determining, pursuing and defending claims, which constitutes the implementation of the legitimate interests of the Controller (Article 6, paragraph 1, letter f of the GDPR).

2. Recipients of marketing activities conducted by Maxi Maja OÜ (including newsletter recipients)

Purposes of personal data processing and legal basis:

a) marketing of own products and services, which constitutes the implementation of the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR),

b) marketing of products and services of companies cooperating with the Administrator, based on consent (Article 6, paragraph 1, letter a of the GDPR),

c) other purposes indicated in the content of consents to the processing of personal data - if such consents were expressed (Article 6, paragraph 1, letter a of the GDPR),

d) determining, pursuing and defending claims, which constitutes the implementation of the legitimate interests of the controller (Article 6 (1) (f) of the GDPR).

Data storage period:

Your personal data will be stored until you withdraw your consent or object, i.e. you demonstrate to us in any way that you do not wish to remain in contact with us and receive information about the activities we undertake.

3. Contractors (including suppliers of products and services to Maxi Maja OÜ) and persons designated to perform the contract

Purposes of personal data processing and legal basis:

a) performance of the contract with the Counterparty or taking action before entering into the contract, at the request of the Counterparty (Article 6, paragraph 1, letter b of the GDPR – if you are the Counterparty; Article 6, paragraph 1, letter f of the GDPR – if you are a person acting on behalf of or for the benefit of the Counterparty),

b) fulfillment of obligations arising from legal provisions, in particular accounting and tax provisions (Article 6, paragraph 1, letter c of the GDPR),

c) the purposes indicated in the content of the consents to the processing of personal data - if such consents were expressed (Article 6, paragraph 1, letter a of the GDPR),

d) determining, pursuing and defending claims, which constitutes the implementation of the legitimate interests of the Controller (Article 6, paragraph 1, letter f of the GDPR).

Data storage period:

Your personal data will be stored for the period required by generally applicable law or until the expiry of the limitation periods for claims arising from the contract with the Contractor - depending on which period is longer. When the basis for data processing is art. 6 sec. 1 letter f GDPR, the data will be processed until a justified objection is filed. When the basis for data processing is art. 6 sec. 1 letter a GDPR, the data will be processed until the consent to processing is withdrawn.

In the case of collecting data in a way other than from you - the source and categories of personal data:

As a rule, we process data provided by you. If you did not provide us with your data, we obtained it from our Contractor or from a person acting in the name or on behalf of our Contractor. We obtain personal data to the extent necessary to conclude and perform the contract, most often these are: first name, last name, e-mail address, telephone number. In the case of cooperation in an IT system - also login, password and history of cooperation.

4. People visiting Maxi Maja OÜ profiles on social media (Facebook, YouTube, Instagram, Twitter, Pinterest)

Purposes of personal data processing and legal basis:

a) promotion of the activities of Maxi Maja OÜ, which constitutes the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR),

b) maintaining ongoing correspondence using tools provided by social networking sites (Article 6, paragraph 1, letter f of the GDPR).

Data storage period:

The data will be processed until an effective objection to data processing is filed.

Data storage period:

Your personal data will be stored until the expiry of the limitation periods for claims resulting from the contract we perform, i.e. the sale of the product and the expiry of the deadlines resulting from the generally applicable provisions of tax and accounting law. When the basis for data processing is art. 6 sec. 1 letter f GDPR, the data will be processed until a justified objection is filed. When the basis for data processing is art. 6 sec. 1 letter a GDPR, the data will be processed until the consent to processing is withdrawn.

Sharing personal data with third parties.

1. Maxi Maja OÜ does not sell your data to third parties and only shares it when it is necessary to perform our contract with you or to fulfill a legal obligation. We conclude a processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Maxi Maja OÜ remains the controller of these processing operations within the meaning of the General Data Protection Regulation (GDPR).

2. Depending on the purpose for which we process your personal data, Maxi Maja OÜ may disclose them to the following entities:

a) state authorities or other entities authorized under the regulations – if it is necessary to fulfill legal obligations,

b) entities supporting us in our business activities, in particular: suppliers of external IT systems, subcontractors, entities auditing our activities or appraisers, c) entities providing accounting, HR, debt collection or legal services – to the extent necessary to ensure the fulfilment of legal obligations or to establish, pursue and defend claims,

c) entities providing accounting, HR, debt collection or legal services - to the extent necessary to ensure the fulfilment of legal obligations or to establish, pursue and defend claims,

d) website, social media or other audience users – in the event of a valid legal basis for making the data public,

e) companies disposing of or archiving documents and other media – to the extent that the data is stored in paper form or on such media,

f) companies providing courier and postal services – in the case of correspondence,

g) banks, insurance companies and other financial and payment institutions - if necessary to conduct settlements,

h) intermediaries, agents and proxies acting on behalf of the organisation,

i) companies conducting marketing activities.

Cookies or similar techniques we use.

Maxi Maja OÜ uses functional and analytical cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit this website. Maxi Maja OÜ uses cookies with purely technical functionality. They ensure the proper functioning of the service and, for example, remember your preferred settings. These cookies also serve to ensure the proper functioning of the website and its optimisation. When you first visited our website, we already informed you about these cookies and their placement. You can opt out of cookies by setting your internet browser so that it no longer stores cookies. You can also delete all previously saved information via your browser settings. For an explanation, see: https://veiliginternetten.nl/themes/gedrag/cookies-wat-zijn-het-en-wat-doe-ik-ermee/

Data transfer outside the European Economic Area.

Your personal data will not be transferred outside the European Economic Area (hereinafter: EEA) as a rule. However, taking into account the services provided by the Controller's subcontractors in the implementation of support for ICT services and IT infrastructure, the Controller may commission the performance of specific activities or IT tasks to recognized subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA (in particular, this applies to the Google Analytics service, more at https://policies.google.com/privacy/frameworks?hl=pl).

Recipients from outside the EEA, in accordance with the decision of the European Commission, ensure an adequate level of protection of personal data in accordance with EEA standards. In the case of recipients in the territory of States not covered by the decision of the European Commission, in order to ensure an adequate level of this protection, the Controller concludes agreements with recipients of your personal data, based on standard contractual clauses issued by the European Commission in accordance with Article 46 paragraph 2 letter c of the GDPR.

A copy of the standard contractual clauses can be obtained from the Controller by contacting the contact details provided above. The method of securing your data used by the Controller is consistent with the principles set out in Chapter V of the GDPR. You may request further information on the safeguards applied in this respect, obtain a copy of these safeguards and information on where they are made available.;

View, modify or delete data.

You have the right to access, correct or delete your personal data. You can do this by contacting us. In addition, you have the right to withdraw your consent to the processing of your personal data or to object to the processing of your personal data by our company and you have the right to data portability. This means that you can submit a request to us to transfer the personal data that we hold about you in a computer file to you or another organization indicated by you. If you wish to exercise your right to object and/or the right to data portability or if you have other questions/comments regarding data processing, please send a specific request to contact@maximaja.com. To ensure that the access request was made by you, please attach a copy of your identity card or passport to the request. In this copy, take a passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and BSN number. This is to protect your privacy. Maxi Maja OÜ will respond to your request as soon as possible, but in any case within four weeks. Maxi Maja OÜ would also like to point out that you have the option of filing a complaint with the national supervisory authority, the Dutch Data Protection Authority. You can do so via the following link:

link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

Or the President of the Office for Personal Data Protection, more information at:

https://uodo.gov.pl/pl/p/skargi

more information on the rights of data subjects is available in Articles 12-23 of the GDPR, the text of which can be found at:

https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679 .

How we protect personal information.

Maxi Maja OÜ takes the protection of your personal data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not adequately secured or there are signs of abuse, please contact contact@maximaja.com.

Voluntary provision of data.

Providing data is necessary to conclude contracts and settle the conducted business activity and for the Administrator to meet the requirements of the law. In the remaining scope (in particular for the purpose of processing data by the Administrator for marketing purposes), providing data is voluntary.

Processing of personal data in an automated manner.

Your data will not be subject to automated decision-making that has legal or similarly significant effects.

Final provisions.

This Policy may be modified from time to time. Modifications are intended to reflect changes in Maxi Maja OÜ practices and laws regarding the processing of personal data. Significant changes to the Policy will be signaled through clearly visible messages posted on www.maximaja.com or additionally through other channels.