OUR PRIVACY POLICY AT A GLANCE

  1. WHO WE ARE. We are SIBERIAN NATURAL PRODUCTS OÜ, and we process your personal data as joint controllers. This means that we are jointly responsible for how we process and protect your data.
  2. WHAT WE USE YOUR DATA FOR. We will use your data (collected online or in person), among other purposes, to manage your registration as a user, to manage your purchases of products or services, to respond to your queries, and, if you wish, to send you our customised communications.
  3. WHY WE USE YOUR DATA. We have legal standing to process your data for various reasons. The main reason is that we need to process your data to perform the contract that you accept with us when you register and when you make a purchase or enjoy any of our services or functionalities. We also use your data for other reasons, for example, to respond to your queries or to send you newsletters that you have asked to receive from us.
  4. WHO WE SHARE YOUR DATA WITH. We share your data with service providers who provide us with assistance or support, these being companies in the Inditex Group or third party providers, both inside and outside the European Union.
  5. YOUR RIGHTS. You have the right to access, rectify or delete your personal data. In certain cases, you are also entitled to other rights, such as, for example, to object to us using your data, or to transferring your data, as explained in depth below.

We encourage you to read our full Privacy Policy below to understand in depth the manner in which we will use your personal data and your rights over your data.
 

BEFORE YOU START

  • In this Privacy Policy, you will find all relevant information applicable to our use of our users’ and clients’ personal data, regardless of the channel or means (online or in person) of SIBERIAN NATURAL PRODUCTS OÜ in Estonia that you use to interact with us.
  • We are transparent about what we do with your personal data, to help you to understand the implications of the way in which we use your data, and the rights you are entitled to in relation to your data:
    • We permanently make available for you all the information included in this Privacy Policy, that you can check when you consider appropriate, and in addition,
    • you will also find further information on how we use your data as you interact with us.
  • These are some terms we regularly use in this Privacy Policy:
    • When we speak about our Platform, we refer, in general, to any of the channels or means, digital or in person, you may have used to interact with us. The main one is Our Websitevitaforest.eu.
  1. WHO IS THE CONTROLLER OF YOUR DATA?

Your data controllers are:

SIBERIAN NATURAL PRODUCTS OÜ, company currently operating in Estonia the sale of Vitaforest LLC:

  • Postal address: Estonia, 11415 Tallinn, Peterburi tee 47
  • E-mail address of the Data Protection Officer: info@vitaforest.eu

In other words, SIBERIAN NATURAL PRODUCTS OÜ and Vitaforest LLC (jointly “We”, “Us” or “the Joint Controllers”), are Joint Controllers of the data. This means that we have regulated and are jointly responsible for processing and protecting your personal data.

  1. WHY WE PROCESS YOUR PERSONAL DATA

Depending on the purpose for which we process your data from time to time, as explained above, we need to process one or other data, which will in general be, depending on each case, as follows:

  • your identity data (for example, your name, surname, language and country from which you interact with us, contact data, etc.);
  • economic and transactions information (for example, your payment or card data, information on your purchases, orders, returns, etc.);
  • connection, geolocation and/or browsing data (if you interact with us from your mobile phone, for example);
  • commercial information (for example, if you have subscribed to our newsletter),

Remember that, when we ask you to fill in your personal data to give you access to any functionality or service of the Platform, we will mark certain fields as compulsory, since this is information that we need to be able to provide the service or give you access to the functionality in question. Please take into account that, if you decide not to make such data available to us, you may be unable to complete your user registration or may not be able to enjoy those services or functionalities.

Depending on how you interact with our Platform, i.e., depending on the services, products or functionalities that you wish to enjoy, we will process your personal data for the following purposes:

PURPOSE+ info
1. To manage your registration as user of the PlatformIf you decide to become a registered user of our Platform, we need to process your data to identify you as a user of the Platform and grant you access to its various functionalities, products and services available to you as a registered user. You may cancel your registered user account by contacting us through Customer Support.You may also use the access or login through a social network such as Facebook, either to register as a new user or to link the login to your current account. In that case, your login credentials, as well as your e- mail if you authorise it, will be imported from your social network account. On using this login option, the social network may send us certain additional information on your public profile, such as, for example: your name, gender, approximate age or profile photograph, in accordance with the terms of use of the social network,  which we advise you to read carefully. Unless you give us your authorisation, we will not keep these additional data. Moreover, using this functionality may imply that you will be sharing with the social network some information on your activity. In any case, we recommend that you review the setting up of your privacy and the privacy policies of the social networks to understand how such social networks use your data.
2. For the development, performance and execution of the purchase or services contract that you executed with Us on the PlatformThis purpose includes processing your data, mainly:To contact you for updates or informative notices related to the contracted functionalities, products or services, including quality surveys and to be able to establish the degree of customer satisfaction with the provided service;To manage payment of the products that you purchase, regardless of the payment procedure used. For example:If on purchasing any of our products through the Website, you opt to activate the functionality of save your card data for future purchases, we need to process the indicated data for activation and development of that functionality. Consent to the activation of this functionality enables your autocompleted payment data to appear in subsequent purchases so that you do not need to introduce them in each new process, and these data will be deemed valid and effective for subsequent purchases. You may change or cancel your cards at any time through the section on payment information, either of your Website registered user account.Activate the necessary arrangements in order to control and prevent potential fraud against you and against us during the purchase process. If we consider that the transaction can be fraudulent, this processing may cause the blocking of the transaction.To manage potential returns after you have purchased and manage requests of availability information for articles, reservations of products through the Platform, or provide you the services related to the functionality Personal Tailoring, depending on the availability of such options from time to time.For invoicing purposes and to make available to you the tickets and invoices of the purchases you have made through the Platform.To ensure that you are able to use other available functionalities or services, such as the purchase, management and use of the Gift Card or of the Gift Voucher, and to afford you access and use of the Wi-Fi that we make available to our customers at Brick-and-Mortar Stores.
3. To meet requests or applications that you make through the Customer Support channelsWe only process the personal data that are strictly necessary to manage or resolve your request or application.
4. For marketing purposes.This purpose includes the processing of your data, mainly, for:If and when you subscribe to our Newsletter, we will process your personal data to manage your subscription, including to send customised information on our products or services through various means (such as e-mail or SMS). We may also make available to you this information through push notifications in case you have activated them in your mobile device.Accordingly, please take into account that this data processing implies analysis of your user or customer profile to establish your preferences and therefore which products and services are most fit to your style when sending you information. For example, based on your purchases and browsing history (i.e., depending on the articles that you clicked), we will make you suggestions on products that we believe may interest you and, if you are a registered user, we will provide you with the “recover cart ” functionality.Remember that you may unsubscribe from the Newsletter at any time without cost through the “Newsletter” section of the Platform, in addition to through the instructions that we provide you with in each notice. If you do not want to receive push notifications, you can deactivate this option in your mobile device.To perform promotional actions (for example, for the organization of competitions or to send the list of items stored to the e-mail you designate). On participating in any promotional action, you authorise us to process the personal data that you have shared with us depending on the promotional action and disclose them through different media such as social networks or the Platform itself. In each promotional action in which you participate you will have available the terms and conditions where we will be providing more detailed information about the processing of your personal data.To disseminate in the Platform or through our channels in the social networks photographs or pictures that you shared publicly, provided that you expressly give us your consent for the purpose.
5. Analysis of usability and quality to improve our servicesIf you access our Platform, we inform you that we will treat your browsing data for analytic and statistic purposes, i.e., to understand the manner in which users interact with our Platform and thus be capable of introducing improvements in the Platform.In addition, we occasionally perform quality surveys and actions to know the degree of satisfaction of our customers and users and detect those areas in which we may improve.
  1. HOW WE ARE LEGALLY PERMITTED TO PROCESS YOUR DATA?

The legal terms on which we are permitted to process your personal data also depends on the purpose for which we process them, as explained in the following table:

PurposeLegal standing
1. To manage your Platform user registrationWe process your data because this is necessary on the terms regulating the use of the Platform. In other words, for you to be able to register as a user on the Platform, we need to process your personal data, since we would otherwise be unable to manage your registration.If you opt to use the access or login through a social network, we are legally permitted to process your data given the consent that you give when authorising the assignment of your data from the social network.
2. Development, performance and making of the purchase or services contractWe process your data because their processing is necessary for us to make the purchase or services contract with you.Certain processing of data related to the purchase process is activated only because you request or authorise it, as is the case of the storage of payment (card) data for future purchases or the processing of data necessary to scan the till receipts through the Wallet section of the App or to provide you with the Coming Soon / Back Soon functionalities. In these cases, our processing of your data is supported by your own consent.We consider that we have a legitimate interest to carry out the necessary verifications to detect and prevent potential fraud when you make a purchase. We understand that the processing of these data is positive for all the participating parties when a purchase is paid and in particular for you, since this allows us to establish measures to protect you from fraud attempts by third parties.
3. Customer SupportWe consider that we have legitimate interest in answering the requests or consultations raised by you through the existing different contact channels. We understand that the processing of these data is also beneficial to you to the extent that it enables us to assist you adequately and answer to the consultations raised.When you get in touch with us, in particular, for the management of incidents related to your order or the product/service acquired through the Platform, the processing of your data is necessary to perform the purchase contract.
When your consultation is related to the exercise of your rights on which we inform you below, or to claims on our products or services, we are legally permitted to process your data for compliance with our legal obligations.
4. MarketingWe are legally permitted to process your data for marketing purposes due to the consent that you give us, for example when you accept receiving customized information through multiple channels, when authorizing the sending of push notifications in your mobile device or when accepting the legal  terms and conditions to participate in a promotional action or to publish your pictures on the Platform or on our social networks’ channels.In order to show you customised information. we consider that we have a legitimate interest to conduct a profiling with the information that we have about you (such as your browsing, preferences or purchase history) and the personal data that you have provided us, such as the age range or language, since we understand that the data processing of these data is also beneficial to you because it allows you to improve your user experience and access the information in accordance with your preferences.
5. Analysis of usability and qualityWe consider that we have a legitimate interest in analysing the Platform usability and the user’s satisfaction degree, since we understand that that the processing of these data is also beneficial for your because the purpose is to improve the user experience and provide a higher quality service.
  1. HOW LONG WILL WE KEEP YOUR DATA?

The time for which we will keep your data will depend on the purposes for which we process them, as explained below:

PurposeTime for which the data are kept
1. To manage your Platform user registrationWe will process your data for the time during which you remain a registered user (meaning, until you decide to unsubscribe).
2. Development, performance and execution of the purchase or services contractWe will process your data for the time necessary to manage the purchase of the products or services that you buy, including potential returns, complaints or claims related to the purchase of the product or service in question.
Sometimes, we will only process the data until the time when you decide, as is the case of payment (card) data that you requested us to store for future purchases.
3. Customer SupportWe will process your data for the time necessary to meet your request or application.
4. MarketingWe will process your data until you unsubscribe or cancel your subscription to the newsletter.If you participate in promotional actions, we will keep the data during a six (6) months period from the end of the action.
5. Analysis of usability and qualityWe will process your data occasionally for the time during which we proceed to carry out a specific quality action or survey or until we anonymise your browsing data.

Notwithstanding the fact that we will process your data for the time strictly necessary to achieve the purpose in question, we will subsequently keep them duly stored and protected for the time during which liability may arise  for their processing, in compliance with legislation in force from time to time. Once each of the potential actions is time-barred we will proceed to delete the personal data.
 

  1. DO WE SHARE YOUR DATA WITH THIRD PARTIES?

To achieve the purposes mentioned in this Privacy Policy, we must give access to your personal data to entities of the Inditex Group and to third parties that provide us with support in the services that we offer your, i.e.:

  • financial institutions,

For service efficiency purposes, some of these providers are located in territories outside the European Economic Area that do not offer a level of data protection comparable to that of the European Union, in other words, the United States of America. In such cases, we inform you that we will transfer your data with adequate safeguards and always keeping your data safe:

  1. WHAT YOUR RIGHTS ARE WHEN MAKING YOUR DATA AVAILABLE TO US

We undertake to keep your personal data confidential and to ensure that you may exercise your rights. Bearing that in mind, we Joint Controllers have agreed that you may exercise your rights free of charge by writing us an e-mail to a single e-mail address (info@vitaforest.eu), simply informing us of the reason for your  request and the right that you wish to exercise. If we consider this necessary to be able to identify you, we may request you to provide a copy of a document evidencing your identity.

In particular, notwithstanding the purpose or legal basis we use to process your data, you have the following rights:

  • To request access to your personal data that we hold. We remind you that where you are a Platform registered user you may also consult this information in the relevant section of your online account.
  • To request that we rectify the personal data that we hold. Please bear in mind that if you are a registered user on the Platform, you may also access the relevant personal data section of your online account to change or update your personal data. In any case, please take into account that, on actively making your personal data available to us through any procedure, you guarantee that they are true and accurate and you undertake to notify to us any change or modification of your data. You will be liable for any loss or damage caused to the Platform or to the person responsible for the Platform or to any third party by reporting erroneous, inaccurate or incomplete information in the registration forms. Please remember that, as a general rule, you must provide us only with your own data, not with those of third parties, other than to the extent otherwise permitted in this Privacy Policy.
  • To request that we erase your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them.
  • To request that we cancel or limit the processing of your personal data, which entails that in certain cases you can request us to temporally suspend the processing of the data or that we keep them longer that necessary.

If you have given us your consent to process your data for any purpose, you also have the right to withdraw such consent at any time. Some of the circumstances in which you may withdraw your consent are detailed in section 2 where we explain for which purposes we process your data.

When we are legally permitted to process your data due to your consent or to for the purposes of a contract, as explained in section 3, you will also have the right to request the portability of your personal data. This means that you will have the right to receive the personal data that you made available to us in a structured, commonly used and machine-legible format, to be able to transmit them to another entity directly without impediments on our part.

In addition, where the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.

Finally, we inform you that you have the right to file a claim before the responsible data protection regulatory authority, in particular, before:

  1. WHAT HAPPENS WHEN YOU PROVIDE US WITH DATA OF THIRD PARTIES?

We offer functionalities or services that require us to process the personal data of a third party that you must provide, such as in the case of activation and sending of the Gift Voucher or the management of the application for the Gift Voucher. If you provide us with personal data of third parties, you confirm that you informed them of the purposes and of the manner in which we need to process their personal data.

  1. CHANGES TO THE PRIVACY POLICY

We may amend the information contained in this Privacy Policy when we consider this appropriate. Should we do so, we will notify you by various procedures through the Platform (for example, through a banner, a pop-up or a push notification), or we may even send you a notice to your e-mail address when the change in question is relevant to your privacy, for you to be able to review the changes, assess them and, as the case may be, object or unsubscribe from ay service or functionality. In any case, we suggest you to review this Privacy Policy from time to time in case minor changes are made or we make any interactive improvement, taking the opportunity that you will always find it as a permanent point of information on our Website and our App.

COOKIE POLICY

This privacy policy sets out how this website (hereafter “the Store”) uses and protects any information that you give the Store while using this website. The Store is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. The Store may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

What we collect

We may collect the following information:

  • name
  • contact information including email address
  • demographic information such as postcode, preferences and interests
  • other information relevant to customer surveys and/or offers

For the exhaustive list of cookies we collect see the List of cookies we collect section.

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

  • Internal record keeping.
  • We may use the information to improve our products and services.
  • We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
  • From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes
  • if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by letting us know using our Contact Us information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please email us this request using our Contact Us information.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

List of cookies we collect

The table below lists the cookies we collect and what information they store.

Cookie NameCookie Description
FORM_KEYStores randomly generated key used to prevent forged requests.
PHPSESSIDYour session ID on the server.
GUEST-VIEWAllows guests to view and edit their orders.
PERSISTENT_SHOPPING_CARTA link to information about your cart and viewing history, if you have asked for this.
STFInformation on products you have emailed to friends.
STOREThe store view or language you have selected.
USER_ALLOWED_SAVE_COOKIEIndicates whether a customer allowed to use cookies.
MAGE-CACHE-SESSIDFacilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGEFacilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE-SECTION-INVALIDATIONFacilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-TIMEOUTFacilitates caching of content on the browser to make pages load faster.
SECTION-DATA-IDSFacilitates caching of content on the browser to make pages load faster.
PRIVATE_CONTENT_VERSIONFacilitates caching of content on the browser to make pages load faster.
X-MAGENTO-VARYFacilitates caching of content on the server to make pages load faster.
MAGE-TRANSLATION-FILE-VERSIONFacilitates translation of content to other languages.
MAGE-TRANSLATION-STORAGEFacilitates translation of content to other languages.