1. Who are „we“?
When we refer to „we“ (or „our“ or „us“) that means Pullus Consulting OÜ. Our headquarters are in Tallin, Estonia but we operate all over the world.
Our principle address is at Lasnamäe linnaosa, Sepapaja tn 6, 15551.
2. Data protection regulation
Whenever we collect or process personal data we do so in compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
3. What we do
We provide user-friendly, easy access, online solution that helps you break down all cross-border transactions, calculate and settle your tax (“Services”).
4. How we collect data
When you visit our website or use our Services, we collect personal data. The ways we collect data can be broadly categorised into the following.
4.1 Information you provide us directly
When you visit our website or subscribe or use our Services, we ask you to provide us with personal data. Personal data that we collect when registering for our service may include but are not limited to, personal name, ID number, passport address, contact information.
When you use our service personal data, we collect from you may include, but not be limited to personal name, shareholders information (personal name, date of birth, address, contact information), bank details, tax details, contact information.
You are not obligated to disclose your personal information to us, but this might mean that you won’t be able to use some parts of our service.
4.2 Information we collect automatically
We collect some information about you automatically when you visit our website or use some of our services, like your IP address, and device type. This information we use to provide you with better service and experience.
4.3 Information we collect from third parties
We collect your financial information from third party service providers, like Amazon, Shopify, eBay and other eCommerce platforms. Personal data we collect from those third-party service providers include sales reports, orders, orders transactions and other data that we use to provide the service to you.
We will use data collected from third party services only for the purpose of providing service to you.
5. How we use your data
We use your personal data for purposes that include but are not limited to the following:
Account registration. We use your personal data to register your account for Services we provide.
Service. We use your personal information to provide you with Services. Personal information can be accessed by your administrator account. Person logged in with administrator account can access your personal information and rectify it if inaccurate. Share your login information only with those whom you have confidence in.
Communication with you. This may include:
providing you with information you have requested from us or information we are required to send to you
To Improve Service and Develop New Service. We will use your information to develop new features or services and to improve quality of our Service.
To Provide Our Service and Operate Our Business. We may use your information to operate our business, including providing service you requested, provide you with support related to our service and to help us to protect our service.
Customer Service and Technical Support. We may use your personal information for resolution of technical issue or other issue relating to our website or service you experience or contact us about.
To comply with applicable laws and regulations. We may use your personal information to comply with applicable laws and regulations.
6. Legal basis
Legal basis for processing your personal information is the following:
Performance of Contract. In order to provide you Service we collect personal information needed for the Service.
Compliance with Legal Obligation. In order for us to comply with applicable laws and regulations, we collect your personal data.
Legitimate interest. In order to communicate with you and to respond to your request and complaints, we need to process your personal information and therefore we have a legitimate interest to do so.
Consent. Where we have your consent to use your personal data, we will use it, but only for the purposes the consent has been given to. At any time, you may withdraw the consent. Withdrawal of the consent won’t affect the lawfulness of processing before the withdrawal.
7. How can we share your data
From time to time we may need to share your personal information with others.
Third Party Service Providers. We may share your personal information with third party service providers who perform various functions to enable us to provide you with Services and help us to operate our business. Such as eCommerce platforms, customer care, fraud detection and prevention, external accountants.
Regulators, law enforcement bodies, government agencies, courts and other third parties where we think it’s necessary to comply with applicable laws and regulations or to exercise, establish or defend our legal rights.
Other people where we have your consent.
8. International data transfer
Our data hosting servers are located in Frankfurt, Germany. From time to time, to provide you with Services we may share your data. This means that your data may be transfer outside the European Economic Area. Where your personal data is transferred outside the EEA, it will be only transferred to countries that have been identified as providing adequate protection for EEA or to third party where we have approved transfer mechanisms in place to protect your personal data – i.e. by entering into European Commission’s Standard Contractual Clauses.
List of countries that have been identified as providing adequate protection for EEA can be found here.
Security is a priority for us when it comes to your data. We are committed to protecting your personal information and have appropriate technical and organizational measures in place to make sure that happens. While we use Secure Sockets Layer and Secure File Transfer Protocol to keep your data safe while sent over the Internet, please be advised that even the best security measures cannot guarantee the full elimination of all risks. Transmission of personal data over the Internet is at your own risk, and you should only enter, or instruct the entering of, personal information to the Services within a secure environment.
The length of time we keep your personal data depends on what it is and the basis we keep it on. Personal data we collect for the purpose of providing the Services we will keep for as long as we have a business relationship with you and for a period of 2 years afterwards. Personal data we collect for the purpose of complying with applicable laws and regulations we keep for a period of time prescribed with those applicable laws and regulations.
Following that period, we will delete or anonymise your personal data.
11. Your rights
It’s your personal data and you have the following rights relating to collection of your personal data:
To access your personal data and request a copy of your personal data
To rectify inaccurate personal data
To obtain the erasure of your personal data once we have no legal basis for collection and process
In cases set forth by the applicable law to apply for the restriction of the processing, collecting and use of personal data
To lodge a complaint with supervisory authority
12. How to contact us
If you are curious about what personal data we collect and process about you or you want to exercise you rights you can contact us by sending an email to firstname.lastname@example.org.