Privacy Policy

This Policy is an official document of CardEx Business Cards OÜ (hereinafter referred to as the Company/we) and defines the procedure for processing and protecting personal information of individuals (hereinafter referred to as Users/you) who use the CardEx platform services (hereinafter referred to as the Platform), available at www.cardex.cc (hereinafter referred to as the Site) and in the CardEx mobile application.

The Company offers products, services and technologies (hereinafter referred to as Products) that enable Users to organize, display and exchange information with their contacts through the use of the Platform.

The purpose of this Policy is to ensure that Users' personal information is adequately protected from unauthorized access and disclosure.

Relationships related to the collection, storage, transfer and protection of Users' personal information are regulated by this Policy, other official documents of the Company, the European Union (EU) General Data Protection Regulation 2016/679 (hereinafter — GDPR), other applicable EU and EU member states legislation.

This Policy is developed and used in conjunction with the CardEx Platform Terms of Use Agreement, available at: www.cardex.cc.

For purposes of this Policy, Personal Information means any information relating to an identified or identifiable individual.

Application of this Policy

When you access our Platform or use our Products, you become a User and agree to this Policy and become a party to the CardEx Platform Terms of Use Agreement.

If you do not agree to the terms of this Policy and/or the CardEx Platform Terms of Use Agreement, your use of the Platform must be terminated immediately.

This Policy describes the types of information that we may receive from you or that you may provide to us when you visit, register, use or access our Platform or Products, as well as our methods for collecting, using, storing, protecting and disclosing that information.

Our Platform and Products allow Users to customize their pages and profiles by uploading and linking content and information that may be shared with other Users or third parties. The information that Users can provide on the Platform is extensive. We may receive information directly from you when you provide it to us (for example, by registering on the Platform or uploading such information to your page on our Platform) or automatically when you access, use or interact with our Platform or Products (such as your Internet connection, the device you use or the location of that device). We may also receive information when you connect a third-party application to your account on the Platform.

Categories of information we collect or receive:

Personal or contact information.

Your first name, last name or similar identifier, mailing addresses, unique personal identifiers, online identifiers, IP addresses, email addresses, accounts social media or identifiers (such as username), age, date of birth, or other similar contact information, or forms of identification.

Transaction Information.

Any information about payments to and from you, and other information about subscriptions and services you purchased from us.

Content Data Information.

Any content that you post on the Platform, including but not limited to images, third-party links (including links to social media accounts), documents that you have uploaded to the Platform, posts about yourself, preference settings, messages, comments and other content on our Platform, and metadata about them.

Marketing and Communication Information.

Your preferences for receiving marketing materials from us and your communication preferences. If you correspond with us by email or through our Platform, we may retain the content of such communications and our responses.

Behavior and Usage Information.

Details about your access, use or interaction with our Platform or Products, including traffic data, location data, logs and other communication data, and the information you access on our Platform. This may also include data automatically collected when you use our Platform or Products (such as the length of time you visit a page), as well as inferred information regarding your behavior and interests based on your activity on our Platform or in our Products. We may also use these technologies to collect information about your online activities over time and on third-party websites or other online services.

Technical Information.

IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Platform. We may collect this information automatically through the use of cookies, logs and web beacons.

Aggregate Data or Information.

We may also collect, use and share "aggregated data" or "aggregated information," such as statistical or demographic data. Aggregated information may be derived from your personal information, but in aggregate form it will not constitute personal information because this data does not directly or indirectly reveal your identity. However, if we combine or link aggregated data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information to be used in accordance with this Policy.

Third-party sources, cookies, and other tracking technologies.

We may also collect or receive personal information from third-party sources, and the Platform may contain links to other sites. Any information you provide on linked pages is provided directly to that third party and is subject to their terms and policies. This Policy does not apply to such linked third-party sites, and we are not responsible for the content or privacy and security practices and policies of those sites.

Some information on the Platform may be provided by third parties, including advertisers, ad networks and servers, content providers and application providers. These third parties may use cookies alone or in combination with web beacons or other tracking technologies to collect information about you. The information they collect may be related to your personal information or sensitive information, or they may collect information, including personal information, about your activities over time and on various websites and other online services. They may use this information to provide you with interest-based advertising or other targeted content. We have no control over third-party tracking technologies or how they are used. If you have any questions about advertising or other targeted content, you should contact the provider responsible directly.

We may collect information about your use of the Platform, including pages and links you have viewed, time spent using our Platform, demographic information such as server locations, connection speeds and other information that does not identify you. Like most online services, we also use cookies, log files, clear GIFs, tracking pixels, web beacons and other technologies that may collect personal information.

When you visit our Platform, we may send one or more cookies — small data files — to your device to uniquely identify your browser and help you navigate our Platform better. A cookie may transmit information about how you use our Platform or Products so that we can provide you with a more personalized experience. A persistent cookie remains on your device after you close your browser so that it can be used on future visits to our Platform. Persistent cookies can be deleted by following your web browser’s instructions. A session cookie is temporary and disappears when you close your browser.

Our Platform may use the following types of cookies, logs, web beacons and other tracking technologies:

Basic Cookies.

Essential cookies are necessary to provide you with the services available on our Platform. For example, they are used to log you into secure areas of our Platform and to help you download content quickly.

Functionality cookies.

Functionality cookies allow us to remember choices you make when you use our Platform, such as remembering your registration information. The purpose of these cookies is to provide you with a more personal experience and to avoid re-entering your preferences each time you visit our Platform.

Analytic and operational cookies.

Analytics and performance cookies are used to collect information about traffic on our Platform and how Users use our Platform and Products. The information collected does not directly identify any individual visitor. However, it may make such visitors "indirectly identifiable" because the information collected is typically linked to a pseudonymous identifier associated with the device you use to access our Platform. The information collected is aggregated and anonymous. We use this information to improve the effectiveness of our Platform, to gather broad demographic information and to track the level of activity on our Platform. We also use a number of third-party tools and services for this purpose.

Targeting and advertising cookies.

Target and advertising cookies track your browsing habits so that we can show third parties what may be of interest to you. These cookies use information about your browsing history to group you with other users with similar interests. Based on this information, the third party may place cookies so that they can show ads that may be relevant to your interests when you are on the third-party site. Third-party advertisers may also use other technologies in addition to cookies (such as web beacons) to measure the effectiveness of their advertising and to personalize their advertising content.

Social media cookies.

Social media cookies are used when you share information using the social media sharing button or "Like" button on our Platform, or you link your account or interact with our content on a social media site such as Facebook, Twitter, Instagram, or through it, or TikTok. These cookies may also include code placed on our Platform to help track conversions from ads, optimize ads based on collected data, and build target audiences for future ads.

Log Files.

Log file information is automatically transmitted by your browser every time you visit a web page. When you use our Platform, our servers automatically record certain information that your web browser sends each time you visit a site. These server logs may include information such as your web request, IP address, browser type, outgoing/outgoing pages and URLs, number of clicks, domain names, landing pages, pages viewed, and other similar information.

How to block cookies

You can block cookies by setting your Internet browser to block some or all cookies. However, if you use your browser settings to block all cookies (including essential cookies), you will not be able to access all or part of our services. By using our Site, you consent to our use of cookies and to our processing of information collected through such cookies in accordance with this Privacy Policy. You can withdraw your consent at any time by deleting the cookies we have placed and disabling cookies on your browser or as described below. You can change your browser settings to block cookies or to receive notifications of cookies being sent to you, to delete cookies, or to browse our Site using your browser’s anonymous use setting. Please refer to your browser’s instructions or help screen to learn more about how to customize or change your browser settings. If you do not agree to our use of cookies or similar technologies that store information on your device, you should change your browser settings accordingly. You should be aware that some features of our website may not function properly if you do not accept cookies or these technologies. If required by applicable law, you will be asked to consent to certain cookies and similar technologies before we use or install them on your computer or other device.

How we use your information

We use the information that we collect about you or that you provide to us, including any personal information:

To introduce you to our Platform and its content, and to personalize and improve our Platform and Products.

To provide you with the information, Products or services you request from us. For example, if you provide your personal information (such as name and contact information) to request a quote or ask a question about our Products, we will use that information to respond to your request. If you provide your personal information to purchase a Product (e.g., name and shipping information), we will use that information to process your payment and facilitate delivery. We may also retain your personal information to facilitate the ordering of new Products, to process returns or to notify you of our offers.

To allow you to participate in interactive features on our Platform or through our Products. For example, to allow you to share your personal information with other users.

To provide you with notifications of your accounts, pages, or subscriptions, including expiration and renewal notices.

To fulfill our obligation and enforce our rights under any contracts between you and us, including for billing and collections.

To notify you of changes to our Platform or any Products we offer or provide.

To ensure the security, protection and integrity of the Platform, Products, databases and other technology assets.

To test, research, analyze and develop Products, including to develop and improve our Platform and Products.

To respond to law enforcement requests and as required by applicable law, court order or governmental regulation.

In any other manner that we describe when you provide information, or as otherwise set forth in applicable law.

For any other purpose with your consent.

Disclosures

We may share your information (including Personal Information) by disclosing it to a third party in order to provide you with our Platform and its security, and to promote or sell our Platform or Products. We disclose this information in accordance with written contracts that describe the purposes, require the recipient to keep the Personal Information confidential, and prohibit the use of the disclosed information for any purpose other than to fulfill the contract. We do not sell your personal information.

Except as described in this Policy, we will not disclose your information to third parties without your consent. We may disclose information to third parties if you give your consent and under the following circumstances:

Processors.

We engage contractors to support our Platform and Products, including, for example, Platform or Product development, search engine optimization, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analysis, data validation and compliance, and other services that may require them to access, process or use your personal information.

Affiliates.

We may share any information we receive with our corporate affiliates for any purpose described in this Policy.

Service Providers.

We may share necessary information we receive with service providers engaged in connection with the provision of our Platform and Products to you.

Analytics Partners.

We may use analytics services to collect and process certain analytics data. These services may also collect information about your use of other websites, applications and online resources.

Advertising Partners.

We may work with third-party advertising partners to show you advertisements that we think may be of interest to you. If you don’t want to receive personalized advertising, visit their opt-out pages to learn how you can opt out of receiving personalized advertising online. You can access any settings offered by your mobile operating system to limit ad tracking.

As required by law and similar disclosures.

We may access, retain and disclose your information when we believe it is necessary or appropriate to: comply with law enforcement and legal process, such as a court order or subpoena; respond to your requests; or protect your, our or others' rights, property or safety. For the avoidance of doubt, disclosure of your information may occur if you post any unsolicited content using our Platform.

Sale or other transfer of assets.

We may transfer your information to potential transaction partners or other third parties in connection with the consideration, negotiation or completion of a corporate transaction in which we are acquired or merged with another company, or we sell, liquidate or transfer all or part of our assets.

Retention of Personal Information.

The Platform provides for recording, organizing, structuring, accumulating, storing, modifying, retrieving, deleting or destroying personal information using databases located within the EU.

Transfer of information outside the EU

EU legal requirements oblige to report that the transfer of personal information can be made to states where the level of data privacy protection and regulation does not meet the high standards elaborated and applied in the EU. If information is transferred to countries for which the European Commission has not decided that the level of protection of personal data in those countries is commensurate with the regulation in the EU, the hypothetical possibility of leakage of personal information and failure to address such leakage within a reasonable time increases. In such circumstances, the information may be disclosed, and unauthorized persons may use it without the User’s consent. By giving your consent to data processing, you expressly acknowledge that you fully understand and accept the risks involved.

We, in turn, take measures to minimize these risks for you by including (to the extent possible) in contracts and agreements with data recipients provisions that comply with standard contractual clauses approved by the European Commission.

Retention Period for Personal Information

We will retain your information for as long as it is reasonably necessary for the purposes set forth in this Policy, unless you request that we delete your personal information as described under "Your Rights Related to Your Personal Information" below. We will retain your personal information for as long as we reasonably believe necessary to use it for those purposes, unless a longer retention period is required by law. This may include retaining your personal information for the period of time we need to pursue legitimate business interests, perform audits, comply with legal obligations, resolve disputes, and enforce our agreements.

Your rights related to your personal information

You can request access to and obtain information about personal information we hold about you, update and correct inaccuracies in your personal information, restrict or object to the processing of your personal information, anonymize or delete information as appropriate, or exercise the right to data portability to simply transfer your personal information to another company. We will comply with your request within a reasonable time, but no later than one (1) month from receipt of your request.

In addition, you also have the right to file a complaint with a supervisory authority, including in the country where you live, work or where the incident occurred.

You may revoke any consent you previously provided to us regarding the processing of your personal information at any time and free of charge. We will apply your settings in the future and this will not affect the legality of the processing before you withdraw your consent.

You can exercise these rights by contacting us using the contact information at the end of this Policy.

Before granting your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and although any changes you make will be reflected in active user databases immediately or within a reasonable period of time, we may retain information for backup, archiving, fraud and abuse prevention, analytics, legal obligations or when we otherwise reasonably believe that we have a legitimate reason to do so.

Third Parties

Our Site and mobile app may contain links to other websites, products or services that we do not own or operate. We are not responsible for the privacy policies of these third parties. Keep in mind that this Policy does not apply to your activities on those third party services or any information you disclose to those third parties. We encourage you to review their privacy policies before providing them with any information.

Security

We have implemented measures designed to protect your personal information from accidental loss and unauthorized access, use, modification or disclosure. All information you provide to us is stored on secure servers. Any payment transactions will be encrypted using SSL technology.

The security and integrity of your information is also up to you. If we have given you (or if you have chosen) a password to access certain parts of our Platform, you are responsible for keeping that password confidential. You must not share your password with anyone.

We have implemented procedures to deal with any actual or suspected breach of personal information. In the event that personal information is compromised as a result of such a security breach, we will promptly notify individuals whose personal information has been compromised in accordance with the notification procedures set forth in this Policy or as otherwise required by applicable law.

Unfortunately, the transmission of information over the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to or through the Platform. Any transmission of personal information is at your own risk. We are not responsible for circumventing any privacy settings or security measures contained on the Platform.

Children’s Privacy

The Platform is not intended for children under the age of 16. We do not knowingly collect personal information from children under the age of 16. If you are under 16, do not use or provide any information about yourself on the Platform or through any of its features, register on the Platform, or make any purchases through the Platform. If we learn that we have collected or received personal information from a child under the age of 16 without verifying parental or guardian consent, we will delete that information. If you believe we may have any personal information from or about a child under the age of 16, contact us using the contact information at the end of this Policy.

Changes to this Policy

You understand that this Policy may be changed by us without prior written notice at any time in our sole discretion. Any changes to this Policy will be effective when posted on our Site. Accordingly, you should read our Policy before purchasing or using any Products, Platform or services available through the Platform. Your continued use of the Platform or any Product after the last update date will constitute your acceptance of such changes.

Contact Information

If you have any questions, comments, or concerns about our data processing activities, email us at help@cardex.cc or contact us using the contact information below:

Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50−212, 10 152