K Horizons with registered offices in via Harju maakond, Tallinn, Kesklinna linnaosa, Viru väljak 2, 10111, (hereinafter, the “Data Controller“), owner of the website www.kitimimi.com (hereinafter, the “Website“) in its capacity as Controller of personal data of the users who browse and are registered on the Website (hereinafter, the “Users“) hereby provides the following privacy policy according to Article 13 of EU Regulation 2016/679 dated 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “Regulation” and/or “Applicable Regulation“).

This Website and any services offered through the Website are reserved for individuals who are 18 years and over. Therefore, the Data Controller does not collect personal data relating to individuals under 18 years of age. Upon request of the Users, the Data Controller will promptly delete all personal data that has been involuntarily collected and related to subjects under the age of 18.

The Data Controller takes the utmost account of its Users’right to privacy and protection of personal data. For any information related to this privacy policy, Users may contact the Data Controller at any time, using the following method:

The Data Controller has not identified a Data Protection Officer (RPD or DPO), as it is not subject to the obligation of designation provided for by Article 37 of the Regulation.

The personal data of the Users will be processed lawfully by the Data Controller pursuant to Article 6 of the Regulation for the following processing purposes:

Personal data needed for processing purposes described in this paragraph 1 are indicated with an asterisk in the registration form on the Website.

With the User’s free and optional consent, some of the User’s personal data (namely: the name, the surname, the email address, the phone number and the shipping address) may also be processed by the Data Controller for marketing purposes (as for example, sending of advertising material, direct sales and commercial communication or sending newsletters containing information regarding news about the sector relative to the Website activities and the services offered by the Data Controller), or in order for the Data Controller to contact the User through electronic mail to propose to the User the purchase of products and/or services offered by the Data Controller and/or by third parties, to present offers, promotions and business opportunities by the Data Controller and/or by third parties.

In case of lack of consent, the possibility to register on the Website will not be in any way affected.

In case of consent, the User may at any time revoke the same, making a request to the Data Controller in the manner indicated in paragraph 6 below.

The User can also easily oppose further sending of promotional communications via e-mail by clicking on the appropriate link for the revocation of consent, which is present in each promotional email. Once the consent has been revoked, the Data Controller will send the User an e-mail message confirming the revocation of the consent.

The Data Controller informs that, following the exercise of the right of opposition to the sending of promotional communications via email, it is possible that the User continues to receive further promotional messages due to technical and operational reasons (e.g. formation of contact lists already completed shortly before the Data Controller’s receiving of the opposition request). Should the User continue to receive promotional messages after 24 hours from the exercise of the right of opposition, please report the problem to the Data Controller, using the contacts indicated in paragraph 6 below.

With the User’s free and optional consent the User’s personal data (or personal data and contact information or information relative to the services for which the same has shown an interest) may be processed by the Data Processor also for profiling purposes, or to put together the User’s tastes and consumer habits by identifying his or her consumer profile to send the User commercial offers consistent with the profile identified.

In case of lack of consent, the possibility to register on the Website will not be in any way affected.

In case of consent, the User may at any time revoke the same, making a request to the Data Controller in the manner indicated in paragraph 6 below.

The Data Controller will process the personal data of Users using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data.

The personal data of Website Users will be retained for the time strictly necessary to carry out the main purposes explained in paragraph 1 above or, in any case, as necessary for the protection in civil law of the interests of both the Users and the Data Controller.

In the cases referred to in paragraphs 2 and 3 above, the personal data of Users will be retained for the time strictly necessary to carry out the purposes explained in the same and, in any case, as long as the law allows the retention for such scope, included the judicial protection against legal request.

In case the User decides to unsubscribe, block and/or delete its account/profile all the retained data regarding the User will be deleted. Whereas the complete deletion of the User’s data will not be allowed or necessary according to the law, the data will be block for the entire processing.

The employees and/or collaborators of the Data Controller who are in charge of carrying out Website maintenance may become aware of the personal data of the Users. These subjects, who are formally appointed by the Data Controller as “in charge of processing“, will process the User’s data exclusively for the purposes indicated in this policy and in compliance with the provisions of the Applicable Regulation.

The personal data of the Users may also be disclosed to third parties who may process personal data on behalf of the Data Controller as “External Processors“, such as, for example, IT and logistic service providers functional to the operation of the Website, outsourcing or cloud computing service providers, professionals and consultants, carriers and so on.

Users have the right to obtain a list of any external processors appointed by the Data Controller, making a request to the Data Controller in the manner indicated in paragraph 6 below.

Users may exercise their rights granted by the Applicable Regulation by contacting the Data Controller as follows:

Pursuant to Applicable Regulation, the Data Controller informs that Users have the right to obtain indications:

Furthermore, Users have the right to obtain:

Moreover, the Users have:

The Data Controller informs that Users registered with Facebook can register on the Website through the “Connect with Facebook” service or equivalent, in cases where this option is available on the Website. The data that may be communicated by Facebook to the Data Controller through the “Connect with Facebook” service are as follows: name, surname, profile picture, email address with which the User can be contacted by Facebook (with ‘actual’ address or address on the domain proxymail.facebook.com), address and date of birth. The Data Controller will process such data exclusively for the purposes indicated in this statement, in compliance with the consent granted by the User from time to time. By subscribing to the “Connect with Facebook” service and clicking on the “Allow” button, the User agrees that the data referred to above will be transferred from the Facebook platform to the Data Controller. The Data Controller will use this data to facilitate the registration procedure, pre-filling the fields on the User’s registration form with the data communicated by Facebook. Users who use the Facebook Connect service will be able to access the Website using the credentials normally used to access Facebook. For more information on the “Connect with Facebook” service and to change your privacy settings related to this service, please see the following links: http://www.facebook.com/help/405977429438260/ and https://www.facebook.com/about/privacy/your-info-on-other.

The Data Controller is responsible for updating all links viewed in this privacy policy, therefore, whenever a link does not work and/or is not updated, the Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by this link.