**Privacy Policy**

**1. General Provisions**

This Privacy Policy (hereinafter referred to as the "Policy") outlines the procedures for processing personal data and measures to ensure the security of personal data undertaken by Livolia OÜ (hereinafter referred to as the "Operator").

The Operator's primary objective is to respect and protect the rights and freedoms of individuals when processing their personal data, including the right to privacy, personal and family secrets.

This Policy applies to all information that the Operator may obtain about visitors to the website https://thecleanoil.com.

**2. Key Terms**

- **Personal Data**: Any information relating to an identified or identifiable natural person.
- **Processing of Personal Data**: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure, or destruction.
- **Data Subject**: An individual whose personal data is being processed.
- **Controller**: The natural or legal person, public authority, agency, or other body which determines the purposes and means of processing personal data.
- **Processor**: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

**3. Legal Basis for Processing Personal Data**

The Operator processes personal data based on the following legal grounds:

- The data subject has given consent to the processing of their personal data for one or more specific purposes.
- Processing is necessary for the performance of a contract to which the data subject is a party.
- Processing is necessary for compliance with a legal obligation to which the Operator is subject.
- Processing is necessary to protect the vital interests of the data subject or another natural person.
- Processing is necessary for the purposes of the legitimate interests pursued by the Operator or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

**4. Principles of Personal Data Processing**

The Operator adheres to the following principles when processing personal data:

- **Lawfulness, Fairness, and Transparency**: Personal data is processed lawfully, fairly, and in a transparent manner.
- **Purpose Limitation**: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
- **Data Minimization**: Personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
- **Accuracy**: Personal data is accurate and, where necessary, kept up to date.
- **Storage Limitation**: Personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
- **Integrity and Confidentiality**: Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

**5. Rights of Data Subjects**

Data subjects have the following rights regarding their personal data:

- The right to access their personal data.
- The right to rectification of inaccurate personal data.
- The right to erasure of personal data ("right to be forgotten").
- The right to restrict processing.
- The right to data portability.
- The right to object to processing.
- The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- The right to lodge a complaint with a supervisory authority.

**6. Data Collection and Processing**

The Operator collects and processes the following personal data:

- Full name.
- Email address.
- Phone number.

Personal data is collected through the website's contact forms and is used for the following purposes:

- Providing information and services requested by the user.
- Communicating with the user regarding inquiries or orders.
- Sending newsletters and promotional materials, subject to the user's consent.

**7. Data Retention**

Personal data is retained for no longer than is necessary for the purposes for which it is processed. The retention period is determined based on the following criteria:

- The duration of the user's relationship with the Operator.
- Legal obligations requiring data retention.
- The necessity of retaining data for the Operator's legitimate interests.

**8. Data Security**

The Operator implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

- Encryption of personal data.
- Regular testing and evaluation of security measures.
- Access controls to personal data.

**9. Data Sharing and Transfer**

The Operator does not share personal data with third parties, except in the following cases:

- With the data subject's explicit consent.
- When required by law or legal proceedings.
- To protect the vital interests of the data subject or another natural person.

In cases where personal data is transferred to countries outside the European Economic Area (EEA), the Operator ensures appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

**10. Contact Information**

For any questions or concerns regarding this Privacy Policy or the processing of personal data, please contact:

Email: cleanoilft@gmail.com