Privacy Notice

This notice explains Pre Production OÜ, registry code 14041340, address Koidu tn 122-64, 10139 Tallinn, Estonia ("we", "us"," our") processes users ("you") personal data in relation to the provision of the Platform (as defined below) from such time as you register and set up an account with us.

We operate platforms FashLab and Pre-o-Porter (the "Platform"). When you register on our Platform, we are processing your personal data as a data controller.

How we collect the data

We may collect personal data from a variety of sources.

• Personal data you give us directly when you are creating an account on our Platform.
• Personal data we collect when you are using our Platform and making payments for the services.

The categories of personal data

• User account (name, phone number, e-mail address, social media usernames).
• Customer support (payment information and accountancy documents according to your subscription plan).

Purposes of personal data processing

User account data we collect to manage your orders and offer services, including for registration and managing your user account.

Invoicing and customer support data is used to send you invoices, collecting payments from you and remitting payments on your behalf.

E-mail and phone number are used by our customer support in order to contact you.

We will use your e-mail address to deliver messages regarding the updates of the Platform and our services.

Legal basis

We process your user account data to manage the contractual relationship, provide delivery of agreed services, inform about services provided by us. The information is also used for error correction, operation of the services, and security work.

Invoicing and customer support data processing is necessary for the performance of a contract.

The processing of personal data is subject to legal obligations, for example, accounting and consumer dispute resolution.

Recipients

Your personal data is revealed to the service providers connected to the Platform in order to deliver the services to execute your design. We disclose your data only to the service provider you have selected on our Platform.

We are in charge of the processing of personal data. We transmit the personal data necessary for making payments to the processor, Maksekeskus AS.

Security and access

Personal data is stored in the servers, which are in the European Union Member States or the European Economic Area.

Access to personal data is allowed only to our employees to solve technical issues and provide you with customer support.

We have implemented appropriate organizational and information security measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access and disclosure.

Your rights

Please note, we process your data for offering the services on the Platform.

Access to and rectification of personal data. You can access and make corrections of your personal data under your user account settings. If you are not able to correct your data, please contact our customer support.

Deletion of personal data. You can delete personal data under your user account settings. If you are not able to delete your data, please contact our customer support. The request for deletion will be answered no later than a month, and the deadline for the removal of the data will be specified.

Transfer of personal data (data portability). An application for the transfer of personal data submitted by e-mail will be answered no later than within a month. Our customer support team identifies your identity and informs you about the transfer of personal data.

Data retention period

Personal data is retained as long as you have an active user account on our Platform. When you are closing your user account, all personal data will be deleted, except data necessary under the law (for example, for accounting purposes). The personal data required for accounting purposes is stored for seven years.

If the user account has not been used for 90-days, we will notify you of the existence of your account on our Platform and ask you to confirm whether the account is still active. If no reply is received, the account will be closed, and personal data will be deleted unless such data is required to be stored by law.

In the case of disputes relating to payments and consumer disputes, personal data shall be stored until the claim is executed or until the expiry of the limitation period.

Direct marketing

We will send you direct marketing messages if you have given your consent. If you do not want to receive direct marketing messages, you must select the appropriate reference in the footer of the e-mail or contact our customer support.

Dispute resolution

Disputes relating to the processing of personal data are settled through our customer support. The Supervisory Authority is the Estonian Data Protection Inspectorate (info@aki.ee).