Privacy policy

1. Data controller

The controller of personal data is La Passion Group OÜ, Narva mnt 13-27, 10151 Tallinn, Estonia, registry code 17442958, VAT EE102962910 (“La Passion”, “we”).

For matters concerning personal data, you can write to office@lapassion.group.

2. What data we process

Data you provide to us in an email: your email address, first and last name or company name, job title and the content of the message, including information about your company and its needs.

Technical data necessary for the website to work, processed by the hosting provider (e.g. IP address and browser information in server logs).

3. Purposes and legal bases

Replying to an enquiry and conducting correspondence — Article 6(1)(f) GDPR (our legitimate interest in replying), and where the enquiry concerns entering into a contract — Article 6(1)(b) GDPR.

Preparing an offer and performing a contract — Article 6(1)(b) GDPR.

Complying with legal obligations, e.g. accounting and tax obligations — Article 6(1)(c) GDPR.

Establishing, exercising or defending legal claims — Article 6(1)(f) GDPR.

4. How long we keep data

We keep correspondence about enquiries until the conversation ends and then for 12 months from the last message, unless the conversation results in a contract.

We keep documents related to contracts and settlements for the period required by law.

5. Recipients of data

Data may be shared with entities that provide services to us: the website and email hosting provider (LH.pl Sp. z o.o., Poland), our accounting office and legal advisers — only to the extent necessary to provide those services.

We do not sell personal data.

6. Transfers outside the EEA

The website and email are hosted on servers in the European Union. We do not transfer data outside the European Economic Area. If we use a provider outside the EEA in the future, we will do so on the basis of a mechanism provided for in the GDPR and will update this policy.

7. Your rights

You have the right to access your data, to rectify, erase or restrict its processing, to data portability and to object to processing based on legitimate interest.

To exercise these rights, write to office@lapassion.group.

You have the right to lodge a complaint with a supervisory authority: in Estonia, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and in Poland, the President of the Personal Data Protection Office (UODO).

8. Voluntary provision of data

Providing data is voluntary, but without an email address and a description of your needs we cannot reply to your enquiry.

9. Cookies and analytics

The website does not currently use analytics tools or advertising cookies. If we introduce them, we will update this policy and ask for consent where required.

10. Links to social media

The website contains links to our profiles on Instagram, TikTok and Facebook. Once you go to those services, their operators' privacy policies apply.

11. Changes to this policy

We may update this policy when our services, tools or the law change. The current version is always available on this page.