Privacy Policy

This Policy provides you with information on how SIA “METALKITOR INTERNATIONAL TRADE COMPANY” (joint data controllers) process (collect, record, organise, structure, store, adapt or alter, retrieve, consult, use, disclose by transmission, disseminate or otherwise make available, align or combine, restrict, erase or destruct) personal data collected via the website metalkitor.com/ (hereinafter - the “Site”).

How do we protect visitor information?
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user places an order enters, submits, or accesses their information to maintain the safety of your personal information.
All transactions are processed through a gateway provider and are not stored or processed on our servers.

What personal data is processed?
The following types of your personal data are processed: your given name, surname and middle name/patronymic, address, cell phone numbers and/or e-mail addresses. This data is processed to provide you with information about DIY products, to enable you to purchase such products, enter into a sales contract, fulfill your order, offer, promote and advertise products, send you automatic notifications about the contents of your cart and invite you to purchase the product (for further details, please check the " Email and cell phone notifications" section of this Policy), to run giveaways, to award prizes and to send such prizes to you, as well as for tax and accounting purposes. By giving your consent, you agree to processing of your personal data for the purposes above.

The personal data provided by you while creating an account on the Site, placing an order/concluding a sale contract, joining/entering giveaway or other similar program/competition/game/campaign etc. is subject to processing. The processing also involves the personal data provided by you to third-party sites and platforms (including but not limited to Facebook and Gleam), which you have subsequently consented to be provided/transferred/shared to or with us as well personal data received from you and from any technical devices (including mobile devices) used during your access and use of the Site.

When ordering the goods, the processing of your personal data is necessary for the conclusion of a sale contract, the fulfilment of your order as well as for tax and accounting purposes. A conclusion of a sale contract and fulfilment of your order will be not possible, if you refuse to provide the necessary personal data.

Information obtained during your stay on the Site, including information about your advertising preferences and communication with the joint controllers of personal data, is processed to maintain the Site, conduct market research and carry out marketing activities. This information is automatically retrieved from devices (including mobile devices) when you access the Site. Such information may include device ID or unique identifier, device type and unique device token, location information, including location information from your mobile device, computer and connection information, such as page views, incoming and outgoing traffic, URL data, your IP address, your browsing history (you can learn more about this data from our Cookie Policy - metalkitor.com/cookies.html).

The above data is processed with the IP address of the device you use to access the Site. This information is used to correctly display data and optimize the Site, to protect the Site against cyber-attacks and other damage, as well as to personalize your consumer experience.

No conclusions are drawn about you as a result of your visit to the Site and the data collected. Personal data is evaluated anonymously, except when relevant data is needed to identify violations.

Automated decision-making systems are not used to process your personal data.

You may send a notice at any time that you no longer wish joint data controllers to continue processing the personal data you provided or to make reservations as to the processing of your personal data or to unsubscribe from our marketing proposals by contacting us at service@metalkitor.com.

Email and cell phone notifications
If you have agreed to the processing of your personal data, but have not paid for the product added to the cart (regardless of the reasons), automatic notifications will be sent to the email address and/or mobile phone number specified by you specifying the content of the cart and an invitation to purchase the product. Sending automatic notifications to cell phone numbers may also be done via Viber.

Sharing personal data with third parties
Your personal data may be shared with third parties who are involved in the processing and fulfillment (packaging, labeling, delivery of orders, processing of payment, etc.) of your orders made through the online store of the Site or prizes awarded in the course of giveaway and other similar program/competition/game/campaign etc. The order is processed in accordance with internal instructions, privacy policies and other confidentiality and security requirements.

Your personal data may also be shared with third parties who distribute, customize and analyze your interaction with our content and/or advertising and/or offer you Metalkitor products as well as with online platforms and social networks engaged in conducting marketing researchers and activities.

Third parties involved in the processing and fulfilment of your orders independently determine the list and procedures for processing of personal data they need to process to fulfil your order. Given the above, before ordering the product, it is recommended to read the privacy policies of such persons to understand exactly how your personal data is processed by relevant companies (see for example links to the privacy policy of payment systems: https://www.paypal.com/en/webapps/mpp/ua/privacy-full and postal service/logistics companies:http://www.dhl.com/en/legal.html#privacy, https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/privacy-notice.page. For more insight, you may also want to read Shopify's Terms of Service or Privacy Statement.

By agreeing to this Policy, concluding a contract of sale of the goods and ordering Metalkitor products, you confirm your understanding and consent to the sharing of your personal data as specified herein. You also confirm your understanding and agree that the above companies may process your personal data in any country of the World and agree that your personal data may be disclosed by the above companies in accordance with the laws applicable to them.

This Policy applies only to the processing of personal data received from you while concluding the sale contract, processing and fulfilling your order, when you are adding the product to your shopping cart and specify your cell phone number and/or e-mail address and/or consent to this Policy. If you provide your personal data to a third party or access a third party's website through a hyperlink found on the Site, the processing of your personal data is governed by the privacy policy and business practices of the respective third party. Joint data controllers are not responsible for such third party’s compliance with the legislation on personal data processing.

Your personal data is not sold to third parties.

Storage period
The personal data storage period is determined based on the applicable regulations (for example, those governing the storage period for tax and/or accounting purposes or establishing limitation periods).

At the end of the respective period, the relevant data will be systematically deleted, provided that it is no longer required for the fulfilment of contractual obligations, protection of legitimate interests, compliance with the request lodged by a supervisory or law enforcement agency or an obligation arising in connection with the investigation or trial.

To who and when an access to your personal data is provided?
An access to your personal data (disclosure by transmission, dissemination or otherwise making your personal data available) is provided to regulatory and law enforcement agencies and others:

• on the basis of a request (search warrant, court decision, injunction, etc.), provided that there are sufficient grounds to believe that it is necessary according to the applicable law;
• if there is a reason to believe that providing an access to your personal data is necessary to track, prevent or investigate fraud, unauthorized use of the account or payment credentials, violation of the Terms of use of the Site (metalkitor.com/privacy-policy.html), other harmful or illegal acts;
• if granting an access to your personal data is necessary for the protection of joint data controllers’ rights and legitimate interests or compliance with our obligation arising out of an investigation or trial.

By consenting to the processing of your personal data, you agree to the procedure for provision of access to your personal data specified herein.

Security
The employees engaged in processing of your personal data are obliged to abide the security principles and current provisions on personal data protection.

All necessary technical and organizational measures are taken to implement the latest technological developments in a timely manner and to ensure adequate standards of protection and security of your personal data, including against the risks of unintentional or unlawful destruction, manipulation, damage, alteration or unauthorized disclosure or access.

Your rights
You have the following rights:

• the right to receive personal data provided by you;
• the right to receive information as to whether your personal data is processed;
• the right to request access to and rectification or erasure of your personal data;
• the right to request the destruction of your personal data if this data is processed illegally or is inaccurate;
• the right to restrict the processing of your personal data;
• the right to object to the processing of your personal data;
• the right to withdraw consent to the processing of your personal data at any time;
• the right to request your data in a format that can be transmitted to you or another organization (data portability);
• the right to lodge a complaint with the competent supervisory authority or court;
• other rights provided by applicable laws.

If you have any questions about your rights or would like to exercise your rights, you may send a message to: service@metalkitor.com. Please be aware of our necessity to perform unambiguous identification of your person.

Age restrictions
By using the Site, you confirm that you have reached the age of majority in accordance with the laws applicable in your place of residence and have allowed and consented to the use of the Site by any of your minor family members.

Confidentiality notice
By consenting to the processing of your personal data, you confirm that your personal data is not classified as confidential.

Date of entry into force and change to this Policy
This Policy became effective upon posting on metalkitor.com/privacy-policy.html. Joint data controllers reserve the right to change this Policy at any time. Changes to the Policy take effect immediately after their posting on the Site page metalkitor.com/pages/privacy-policy and apply to users of the Site who have agreed to the processing of personal data after the posting of relevant changes on the Site.

To avoid misunderstandings, you are urged to revise this Policy each time before consenting to the processing of your personal data. By consenting to the processing of your personal data, you agree to the aforementioned method of notification on significant changes in this Policy.