Last updated: Friday, 9th of August, 2024
This Privacy Policy sets out the basis on which we will process any Personal Data that we may collect about you as a visitor to our website at www.stunning.so or our customers or potential customers, or other business partners or in any other cases where we specifically state that this policy will apply. This policy further sets out how we protect your privacy and your rights in respect of our use of your Personal Data.
A "data controller" is a person or organization who alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed. In this sense, Zeew OU of Voolu tn 20a, Nõmme linnaosa, 10918 Tallinn, Estonia ("Stunning", "we", "us", "our") is the data controller. If you have any questions about data protection at Stunning in general, you can reach us by email using hi@stunning.so or our Contact Form.
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute Personal Data.
Estonia's Personal Data Protection Act ("PDPA") and the EU's General Data Protection Regulation ("GDPR") control how your Personal Data is used by us. We are also required to explain which Personal Data we collect from you via our website and shop, what we use it for, when we delete it and how your data is protected.
The legal bases for processing your Personal Data are:
When you visit our website, we collect the Personal Data that your browser automatically transmits to our server. This is technically necessary for us to display our website and to ensure its stability and security. In this sense, we collect the following data:
To provide our website, we use the services of Azure (Microsoft) who process the below-mentioned data and all data to be processed in connection with the operation of our platform on our behalf.
We also use the Content Management System (CMS) of Shuffle to publish and maintain the created and edited content and texts on our website. This means that all content and texts submitted to us by our users is transferred to our Azure server.
For the processing of personal data using cookies and similar technologies on our website, please refer to our Cookie Policy. The legal basis for the use of cookies is our legitimate interest or your consent when you agree to the use of technically non-essential cookies.
As set out in Estonia's Electronic Communications Act ("ECA") and the EU's Privacy and Electronic Communications Directive ("PECD"), we need to obtain consent for the use of technically non-essential cookies.
We use Google Fonts by Google on our website to display external fonts. To enable the display of certain fonts on our website, a connection to a Google server is established when our website is accessed.
Our website uses Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about visitors' use of the map functions.
We have integrated videos from YouTube (Google). The integration requires that YouTube can perceive the IP address of the user. The IP address is required in order to send the video content to the user's browser.
For business reasons, we analyze the data we have on web and server traffic patterns, website interactions, browsing behavior etc. The analyses serve us alone and are not disclosed externally and processed using anonymous analyses with summarized and or anonymized values.
If you wish to use our AI powered website development services, we process the data you provide which typically includes Personal Data and non-personal data ("Service Data"). We recognise that you own your Service Data and provide you with complete control over your Service Data by providing you the ability to:
When we process Service Data, we become your Data Processor or in other words, we will process the Service Data involved in your use of our AI powered website development services in accordance with your instructions and shall use it only for the purpose of providing you our services.
We ensure that access by our employees to your data is only available on a need-to-know basis, restricted to specific individuals, and is logged and audited. We communicate our privacy and security guidelines to our employees and enforce privacy and protection safeguards strictly.
If you make a purchase your payment data will be processed via our payment service providers Stripe and PayPal. Payment data will solely be processed through Stripe/PayPal (as chosen by you) and we have no access to any Payment Data you may submit. The legal basis for the provision of a payment system is the establishment and implementation of the contract.
We process data in the context of administrative tasks as well as organization of our business, and compliance with legal obligations, such as archiving. In this regard, we process the same data that we process in the course of providing our contractual services. The processing bases are our legal obligations and our legitimate interest.
We use your data within the legally permissible scope for marketing purposes, e.g., to draw your attention to special promotions and discount offers via email. In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by post. This serves to protect our legitimate interests.
Affiliate Registration requires some Personal Data and the acceptance of our Affiliate Program Terms. The following information is collected and stored by us: Name, Email, Password. Full registration is necessary to use our Affiliate services and we use the affiliate management platform of Rewardful. The processing of your Personal Data is based on your consent.
We will not disclose or otherwise distribute your Personal Data to third parties unless this is:
We may transfer your Personal Data to other companies as necessary for the purposes described in this Privacy Policy. In order to provide adequate protection for your Personal Data when it is transferred, we have contractual arrangements regarding such transfers. We take all reasonable technical and organizational measures to protect the Personal Data we transfer.
We would like to show you interesting advertising outside of our website and use various third-party tools and cookies for this purpose. These collect and process information about your activities on our website - for example, which products you are interested in or which pages you visit.
Through the tools, your browser regularly establishes a connection to the server of the tool provider when you visit our website. For some tools, we have no direct influence on what data is processed by the providers.
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
We take appropriate organizational, technical, and physical measures to help safeguard against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure of, or access to, the Personal Data we collect and process.
For your convenience, there may be hyperlinks on our website that link to other websites. We are not responsible for, and this Privacy Policy does not apply to the privacy practices of any linked websites or of any companies that we do not own or control.
We do not endorse any of these linked websites, their products, services, or any of the content on their websites. We encourage you to seek and read the Privacy Policy of each linked website that you visit to understand how the information that is collected about you is used and protected.
You can exercise the following rights:
If you have any questions about this policy or the information we hold about you please contact us by email using hi@stunning.so or our Contact Form.
The first version of this policy was issued on Friday, 9th of August, 2024 and is the current version. Any prior versions are invalid and if we make changes to this policy, we will revise the effective date.
Social Media
We are present on social media (currently, X (formerly Twitter) and LinkedIn). If you contact or connect with us via social media, we and the relevant social media platform are jointly responsible for the processing of your data and enter into a so-called joint controller agreement.
When you visit our social media profiles, we, as the operator of the profile, process your actions and interactions with our profile (e.g., the content of your messages, enquiries, posts or comments that you send to us or leave on our profile or when you like or share our posts) as well as your publicly viewable profile data (e.g., your name and profile picture).