{"id":2601,"date":"2025-07-30T11:17:29","date_gmt":"2025-07-30T11:17:29","guid":{"rendered":"https:\/\/storyframes.eu\/?page_id=2601"},"modified":"2025-11-28T18:02:19","modified_gmt":"2025-11-28T18:02:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/storyframes.eu\/lt\/privacy-policy\/","title":{"rendered":"Privatumo politika"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
STORYFRAMES<\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
  1. This Privacy Policy (hereinafter, the \u201cPolicy\u201d) is issued by Estoria O\u00dc, a private limited company incorporated and existing under the laws of the Republic of Estonia, registry code 17158900, with its registered office at Harju County, Estonia (hereinafter, the \u201cController\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) and applies to all users of the Website (hereinafter referred to as the \u201cUser\u201d).<\/li>
  2. This Policy sets out in detail the principles, procedures, and safeguards applied by the Controller in the collection, processing, storage, transfer, and destruction of personal data in the context of our business activities, including, but not limited to, the provision of photo printing and related services via our website.<\/li>
  3. This Policy ensures full compliance with Regulation (EU) 2016\/679 (General Data Protection Regulation \u2013 GDPR), Articles 5\u201349; Estonian Personal Data Protection Act (Isikuandmete Kaitse Seadus); other applicable national and international data protection laws, supervisory authority guidance, and industry best practices.<\/li>
  4. By accessing our website, placing an order, uploading photographs, or otherwise interacting with us, you acknowledge that you have read, understood, and accepted the terms of this Policy.<\/li>
  5. For clarity, the following definitions apply throughout this Policy:
    5.1. Personal Data <\/strong>\u2013 any information relating to an identified or identifiable natural person (Data Subject), as defined in Article 4(1) GDPR;
    5.2.\u00a0<\/strong>Processing <\/strong>\u2013 any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, alteration, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, or destruction (Article 4(2) GDPR);
    5.3.\u00a0<\/strong>Controller <\/strong>\u2013 the entity which determines the purposes and means of Processing (Article 4(7) GDPR);
    5.4.\u00a0<\/strong>Processor <\/strong>\u2013 a natural or legal person processing data on behalf of the Controller (Article 4(8) GDPR);
    5.5.\u00a0<\/strong>Data Subject <\/strong>\u2013 an identified or identifiable natural person whose Personal Data is processed;
    5.6.\u00a0<\/strong>Consent <\/strong>\u2013 a freely given, specific, informed, and unambiguous indication of the Data Subject\u2019s wishes, signifying agreement to the processing of Personal Data (Article 4(11) GDPR).<\/li>
  6. The Controller recognises and respects the fundamental rights and freedoms of individuals, particularly their right to the protection of personal data. All processing activities are carried out in accordance with the principles set out in Article 5 of the GDPR, namely: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. The Controller undertakes to implement and maintain appropriate technical and organizational measures to ensure and be able to demonstrate that processing is performed in compliance with the GDPR and this Policy.<\/li>
  7. The Controller may collect personal data directly from the Data Subject, from third parties, or through automated means. Such data may include, without limitation:
    7.1. Identification data (full name, user account details, unique identifiers);
    7.2. Contact details (email address, telephone number, billing and delivery addresses);
    7.3. Transactional and payment data (order history, payment method, payment reference);
    7.4. Technical and usage data (IP address, browser type, operating system, device identifiers, log data, access dates and times, visited pages, search queries);
    7.5. Other data voluntarily provided by the Data Subject, including but not limited to, photographs, images, and files uploaded to our website for the purposes of fulfilling an order.<\/li>
  8. The Controller may also process data obtained through cookies, server logs, analytical tools, and other similar technologies deployed on the website, subject to applicable legal requirements regarding consent.<\/li>
  9. Personal data shall be processed solely for purposes which are specific, explicit, and legitimate, and shall not be further processed in a manner incompatible with those purposes. Such purposes include:
    9.1. Order Fulfilment: Uploaded photographs and related order details are retained for a limited period to allow for reprints or customer support, and are then securely deleted;
    9.2. Legal and Accounting Requirements: Contact and transactional data may be retained for up to 7 years to comply with legal obligations (e.g. accounting and tax regulations)
    9.3. Marketing Data: If you\u2019ve opted in to receive marketing communications, we retain relevant contact information until you withdraw your consent.<\/li>
  10. The performance of a contract to which the Data Subject is a party or to take steps at the request of the Data Subject prior to entering a contract, including order acceptance, processing, fulfilment, delivery, invoicing, payment processing, and related communications.<\/li>
  11. Compliance with legal obligations arising from applicable law, including tax, accounting, regulatory, and law enforcement requirements.<\/li>
  12. Pursuit of the Controller\u2019s legitimate interests, such as service improvement, security assurance, fraud prevention, customer relationship management, and business development, provided such interests are not overridden by the interests or fundamental rights and freedoms of the Data Subject.<\/li>
  13. Processing based on the Data Subject\u2019s explicit consent for one or more specific purposes, including but not limited to marketing communications, promotional activities, and participation in surveys or competitions.<\/li>
  14. Where processing is based on consent, the Controller shall ensure that such consent is freely given, specific, informed, unambiguous, and may be withdrawn at any time without prejudice to the lawfulness of processing carried out prior to such withdrawal.<\/li>
  15. We process Personal Data on the following lawful grounds (Article 6 GDPR):
    15.1. Performance of a Contract (Article 6(1)(b) GDPR) \u2013 Processing necessary for fulfilling orders and related customer service;
    15.2. Legal Obligation (Article 6(1)(c) GDPR) \u2013 Compliance with tax, accounting, and regulatory requirements;
    15.3. Legitimate Interests (Article 6(1)(f) GDPR) \u2013 Ensuring security, improving services, developing business activities, without overriding your fundamental rights;
    15.4. Consent (Article 6(1)(a) GDPR) \u2013 For marketing communications, surveys, and optional services.<\/li>
  16. The Controller may disclose personal data to third parties strictly on a need-to-know basis and only where such disclosure is lawful and proportionate. Recipients may include:
    16.1. Data processors acting on behalf of and under the instructions of the Controller, such as IT service providers, payment processors, courier and logistics companies, marketing agencies, and analytics providers;
    16.2. Public authorities and regulatory bodies where disclosure is required by law or by a legally binding order;
    16.3. Other entities where the Data Subject expressly consented to such disclosure.<\/li>
  17. All processors engaged by the Controller shall be bound by contractual obligations consistent with Article 28 of the GDPR and shall implement appropriate technical and organizational measures to protect personal data.<\/li>
  18. Personal data shall be retained only for as long as is necessary for the purposes for which it was collected, considering applicable statutory retention periods. Order-related data and uploaded photographs shall be deleted or irreversibly anonymized once they are no longer required for order fulfilment or after-sales Data retained for legal compliance, such as accounting records, shall be kept for the period mandated by law (in Estonia, generally seven years).
    18.1. Orders and transactions: until completion up to 12\u00a0<\/strong>months;
    18.2. Accounting\/tax data: 7 years;
    18.3. Marketing data: until withdrawal of consent;
    18.4. Uploaded files: deleted within 14 days unless otherwise requested.<\/li>
  19. Personal data is retained according to purpose and legal obligations.<\/li>
  20. As a data subject, you have the right to request access to your personal data, to have it rectified if it is inaccurate, to request its erasure when it is no longer necessary for the purposes for which it was collected, to restrict its processing under certain conditions, to object to certain types of processing (including direct marketing), and to receive your data in a structured, commonly used, machine-readable format for transmission to another controller. You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal. All requests to exercise these rights should be sent to us using the contact details provided below, and we will respond within the time limits set out in the GDPR.<\/li>
  21. Our website uses cookies and similar technologies to ensure its proper functioning, to improve performance, to remember user preferences, and, where consent has been given, to provide personalised advertising. Cookies may be set by us or by third parties acting on our behalf. You can manage your cookie preferences at any time through your browser settings, and you may withdraw consent for non-essential cookies without affecting your ability to use the essential functions of the site.<\/li>
  22. We may update this Privacy Policy from time to time to reflect changes in our business processes, services, or legal obligations. The most recent version shall always be published on the Controller\u2019s website, with the date of the latest revision clearly indicated.<\/li>
  23. The User also has the right to file a complaint with the Controller, the Data Protection Inspectorate, or a court if the User believes their rights have been violated in the processing of personal The contact details of the Data Protection Inspectorate (DPI) can be found on the DPI website at www.aki.ee.<\/a><\/li>
  24. For any questions, concerns, or requests related to this Privacy Policy or our processing of personal data, please contact us at:<\/li><\/ol>

    Estoria O\u00dc (Registry Code 17158900)<\/strong><\/p>

    Email: info@storyframes.eu<\/a>
    Website:     www.storyframes.eu<\/a><\/p>

    We will make every effort to respond to your inquiry promptly and in full compliance with our obligations under the GDPR.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

    STORYFRAMES Privacy policy This Privacy Policy (hereinafter, the \u201cPolicy\u201d) is issued by Estoria O\u00dc, a private limited company incorporated and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-2601","page","type-page","status-publish","hentry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/pages\/2601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/comments?post=2601"}],"version-history":[{"count":40,"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/pages\/2601\/revisions"}],"predecessor-version":[{"id":4903,"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/pages\/2601\/revisions\/4903"}],"wp:attachment":[{"href":"https:\/\/storyframes.eu\/lt\/wp-json\/wp\/v2\/media?parent=2601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}