Privacy Policy

2.1.     When the Customer or Supplier has opted to use our Platform, we need to process your Personal Data to enable Users (including User’s representatives) to order or supply Products.

‍2.2.     Biteful as the Data Controller processes Personal Data for the purposes set out in this Privacy Policy. Biteful processes Personal Data based on theApplicable Law, including the Personal Data Protection Act and other legal acts that address personal data processing.

2.3.     Biteful processes personal data based on the principles of personal data protection, including the principle of minimum interference, according to which we process only the data that are required for managing the Platform and achieving our purposes.

2.4.     Upon the use of our Platform, we process Personal Data that is submitted to us directly by the Customers or Suppliers in the course of using our Platform. Such data includes the following data:
2.4.1.     general personal information and contact details: name (first and last name), e-mail address, phone number;
2.4.2.     account related details: login details and information (such as password) used for creating account via Platform;
‍2.4.3.     technical information: technical information collected in the course of your use of the Platform, for example the operating system of your device and other data collected via cookies (please see the section “Cookies”below).

3.1.     Data processing for contract performance. Biteful processes personal data primarily for the purposes of performing contractual obligations that arise from the Terms of Use. The legal basis for personal data processing in this case is article 6(1)(b) of the GDPR(processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).

‍3.2.     Data processing for the performance of a legal obligation. Biteful processes Personal Data also where it is required to perform legal obligations applicable to Biteful. For example, if a court requests Personal Data from Biteful under an applicable court order or court judgement or if a law enforcement agency requests Personal Data under an applicable regulation. Also, if Biteful is obligated to retain Personal Data, for example, under the Accounting Act or other applicable legal acts. In case of such processing, the legal basis for Personal Data processing is article 6(1)(c)of the GDPR (processing is necessary for compliance with a legal obligation to which the Data Controller is subject).

‍3.3.     Data processing on the basis of legitimate interest. Biteful may process your personal data also when it is necessary for Biteful’s legitimate interest in certain cases. In such case, the legal basis for Personal Data processing is article 6(1)(f) of the GDPR. Biteful shall process Personal Data on the basis of legitimate interest only in case such processing is not outweighed by the basic rights and freedoms of the data subject for which the Personal Data must be protected.Only data that has been received from the Data Subject or created during the performance of the Terms of Use is processed on the basis of legitimate interest.

‍3.4.     Biteful may have legitimate interest in the processing of personal data if this is necessary to prepare, submit or defend legal claims. For example, such need may arise in a situation where the Data Subject has violated the Terms of Use, primarily failed to pay the monthly fee for using the Platform. Biteful may also have legitimate interest in processing personal data if this is necessary to ensure the technical functionality of the Platform (please see the section “Cookies” below). The data processed on the basis of legitimate interest shall be retained in compliance with the general statutory limitation period for claims (generally 3 years). More details on the retention period scan be found in the section “Overview of processed personal data”.

5.1.     Biteful does not transfer personal data to third parties, except when Biteful has the legitimate right under the Applicable Law. Biteful does not transfer Personal Data outside the European Economic Area.
‍
5.2.     Biteful may use Data Processors for Personal Data processing. Data Processors assigned by Biteful, who in limited circumstances may process the Personal Data, are, for example, IT-service providers (server providers, IT software developers) or other providers of services required for the functioning of the Platform.
‍
5.3     Biteful uses as Data Processors only such partners whose reliability Biteful has verified and who have committed to processing Personal Data in compliance with the Applicable Law.

6.1.     Our Platform uses Cookies. Cookies are small text files containing information stored on the computer and used for tracking or identification.
‍
6.2.     The Platform uses the following cookies: 10.1.1.   Strictly necessary cookies, that are essential in order to enable you to navigate and use the features of the Platform.
‍
6.3.     The specific cookies that Platform uses are the following:
‍

6.4.     You have the right to delete or block (disable) cookies at any time by changing your browser settings. However, some cookies might be necessary for the functionality of Platform. Cookies can be disabled by following the instructions under the browser’s “help” section. More information on how cookies operate or how to disable cookies is also available on the website www.allaboutcookies.org.
‍

7.1.     Biteful shall ensure all the rights of the data subject arising from the Applicable Law.  

7.2.     In particular, Data Subject shall inter alia have the following rights:
7.2.1.   right to access: the right to ask at any time whether Biteful holds any personal data about them or not and receive information about which Personal Data Biteful is processing about them;
7.2.2.   right to rectification: the right to request from Biteful the supplementation or rectification of their personal data if these are insufficient, incomplete or inaccurate;
7.2.3.   right to object: the right to submit objections to Biteful concerning the processing of one’s Personal Data, for example if the personal data is processed on the basis of the legitimate interests of Biteful;
7.2.4.   right to erasure: the right to request the erasure of Personal Data, for example, if the Personal Data are processed based on the Data Subject’s consent and the Data Subject has withdrawn their consent;
7.2.5.   right to restriction of processing: the right to request from Biteful the restriction of processing of Personal Data under the Applicable Law, for example, where Biteful no longer needs the Personal Data for the purposes of the processing or where the Data Subject has objected to processing;
7.2.6.   right to withdraw the consent for processing Personal Data: if the processing of Personal Data is based on the Data Subject’s consent, the Data Subject has the right to withdraw the consent given to Biteful at any time;
7.2.7.   right to data portability: the right to receive from Biteful the Personal Data that the Data Subject has provided to and which are processed on the basis of the Data Subject’s consent or for the performance of a contract concluded with the Data Subject, in writing or in a generally used electronic format and, if technically possible, request that Biteful transfers these data to another Data Controller;
7.2.8.   right to lodge a complaint: If the Data Subject is of the opinion that the processing of their Personal Data has violated their rights, they have the right at any time to file this claim to the Data Protection Inspectorate / Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee. List of national Data Protection Authorities in EU is available at https://edpb.europa.eu/about-edpb/board/members_en). 

7.3.     The rights of the Data Subject listed in this section regarding the processing of their Personal Data are not absolute rights. In certain cases, the rights of other Data Subjects or the legal obligations of Biteful may limit the rights of the data subject.  

7.4.     In order to exercise the rights pertaining to the processing of Personal Data or to submit requests concerning the processing of personal data, please contact us using the contact details provided in the section “Miscellaneous” below.

8.1.     Biteful shall ensure the security of Personal Data processing, for the purposes of protecting Personal Data from accidental or unauthorised processing, disclosure or destruction.

8.2.     Considering the state of the art and costs of implementation, and the nature, scope, context and purposes of the personal data processing as well as the risk to the rights and freedoms of data subjects, of varying likelihood and severity, that may result from personal data processing, Biteful shall apply appropriate technical and organisational measures upon personal data processing to ensure the protection of personal data.