Privacy Policy
We, lanes OÜ, are committed to protecting the personal data of our users (‘you’) which we collect when you visit our website lanes.pm or using the software services at app.lanes.pm.
Below you will find more information about what personal data we collect when you visit and use our website and how and for what purposes we process it. We only collect, process and use your personal data in compliance with the following principles and in observance of the applicable data protection legislation.
Questions about data protection in relation to our website and the services provided through our website can be sent to us using the contact details in section 1 below.
Data Controller
This Privacy Policy applies to data processing by:
lanes OÜ
Address: Sepapaja 6, 15551, Tallinn, Estonia
Email: hello@lanes.pm
(hereinafter “lanes” or “we”).
Collection and storage of personal data and the type and purpose of their use
2.1 When you visit our website
When you visit our website lanes.pm, information is automatically sent by the browser used on your end device to our website servers. This information is stored temporarily in what is called a log database that is kept separate from other personal data you might provide throughout your use of our website. The following information is collected during this process without any action on your part:
IP address of the requesting device,
Date and time of access,
Name and URL of the requested file,
Website from which access is obtained (Referrer URL),
Browser used and, where applicable, your device’s operating system and the identity of your access provider.
We process the specified data for the following purposes:
Ensuring that the website can establish a connection smoothly,
ensuring that our website is easy to use and fast,
analysis of system security and stability, as well as
for additional administrative purposes.
The specified data is stored in a form that enables identification of the persons concerned for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of a security-relevant event, server log files are stored until the security-relevant event is eliminated and fully resolved.
The legal basis for the data processing is our legitimate interest, which is based on the data collection purposes listed above. We do not on any account use the data collected for the purpose of identifying you. The provision of this data is not required by law or contract or to enter into a contract. You are not obliged to provide the personal data. It is not, however, guaranteed to be possible to access the website if the data are not provided.
We also might use cookies and analysis services when you visit our website. More detailed explanations can be found below.
2.2 When you contact our customer service
We might offer you the possibility to contact us by using a contact form available through the button “contact” on the bottom of our website or inside the application. A valid e-mail address and name are required for this so that we know who the inquiry is coming from and can respond to it. Additional information can be provided on a voluntary basis.
If your request concerns a contract to which you are a party or concerns the implementation of pre-contractual measures, data processing will be carried out as a necessity for the performance or preparation of a contract conclusion in accordance with Article 6 (1) (b) GDPR. For all other enquiries, data processing for the purpose of contacting us is carried out on the basis of legitimate interests (Article 6 (1) (f) GDPR). In this case our legitimate interest is the processing of your request.
Disclosure of data
We have entered into data processing agreements with technical service providers who we use for the purposes of operation and maintenance of our platform and with the providers of tracking and web analysis tools listed under sections 5 and 6 of this privacy policy who process the data on our behalf for the purpose of user analysis and statistical processing. Beyond that, we do not generally disclose any of your personal data to third parties. Exceptions only apply in the following cases:
You have given your express consent to this in accordance with Article 6 (1) (a) GDPR,
disclosure in accordance with Article 6 (1) (f) GDPR is necessary for the purposes of pursuing our legitimate interests or the legitimate interests of the third party and there is no reason to assume that you have any overriding interest in your data not being disclosed which is worthy of protection,
disclosure in accordance with Article 6 (1) (c) GDPR as required by law, and
this is permitted by law and required by Article 6 (1) (b) GDPR for the performance of contractual relationships with you.
Cookies
When you visit our website, we might store information on your terminal device in the form of cookies. Cookies are small files that are transferred from an Internet server to your browser and stored on your hard drive. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website and application. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been to our site and which entries and settings you have made so that you do not have to enter them again or login on every opening of the application.
On the other hand, we might use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see "Tracking Tools", see 5.). These cookies enable us to automatically recognize that you have already been to our site when you visit it again. In addition, we may use cookies for retargeting purposes. These cookies are automatically deleted after a defined period of time.
We use the following cookies on our website:
Necessary cookies:
_cfduid (storage period 1 year):
Used by the Cloudfare content network to identify trusted web traffic and mitigate DDOS attacks.
The data processed by necessary cookies are required for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) sentence 1 lit. f GDPR
Analytics tools
Currently, we use the analysis services plausible.io for pivacy first analyitcs and Mixpanel, a service of Mixpanel Inc. based in the USA (405 Howard St., 2nd Floor, San Francisco, CA 94105, hereinafter "Mixpanel", more information at https://mixpanel.com/legal/privacy-policy/), to perform statistical analyses that enable us to optimize platform functions and make them more appealing. Mixpanel uses cookies to record the type of browser you are using, your operating system, your language settings, the search terms you enter and your IP address. This data is then transmitted to a Mixpanel server in the United States. We receive your IP address from Mixpanel only anonymously. For the USA, there is an adequacy decision of the European Commission (EU/US Privacy Shield), under which Mixpanel is certified.
Marketing
If we receive your e-mail address in connection with the sale of a Service and you have not objected to this, we also reserve the right to send you information on our own similar Services by e-mail on a regular basis as this constitutes a legitimate interest of lanes. You may object to this use of your e-mail address at any time by sending a message to info@lanes.pm or via a link provided for this purpose in the advertising mail.
Security
We have also taken technical and organizational security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees and any service providers who work for us are obliged to comply with all applicable data protection legislation. Our security measures are subject to a continuous improvement process and our privacy policies are constantly revised. Please ensure that you have the most up-to-date version.
Rights of data subjects
You have the right:
in accordance with Article 15 GDPR to obtain information about the personal data processed by us;
in accordance with Article 16 GDPR to obtain without undue delay the rectification or completion of your personal data stored by us;
in accordance with Article 17 GDPR to obtain the erasure of the personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression or information, for compliance with a legal obligation, for reasons of public interest or for the establishment exercise or defense of legal claims. If we have made your personal data public, we are obliged, taking account of available technology and the technical possibilities, to inform controllers which are processing the personal data that the you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data;
in accordance with Article 18 GDPR to obtain the restriction of the processing of your personal data if you contest the accuracy of the personal data, the processing is unlawful, but you oppose their erasure and we no longer require the data, but you require these for the establishment, exercise or defense of legal claims or you have objected to their processing in accordance with Article 21 GDPR;
in accordance with Article 20 GDPR to receive your personal data in a structure, commonly used and machine-readable format or have such transmitted to another controller;
in accordance with Article 7 (3) GDPR to withdraw your consent given to us at any time. This means that we may no longer continue the data processing based on this consent in future, and
in accordance with Article 77 GDPR to complain to a supervisory authority. You can usually contact the supervisory authority at your normal place of residence or your workplace or where we are headquartered for this.
Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR, you have the right in accordance with Article 21 GDPR to object to the processing of your personal data if grounds for this relating to your particular situation exist or the objection is to direct marketing. In the latter case you have a general right to object, which is implemented by us without any particular situation being specified. Sending an appropriate email to info@lanes.pm is sufficient if you wish to exercise your right to withdraw consent or your right to object.
Amendments to this Privacy Policy
This Privacy Policy is currently valid.
It may be necessary to amend this Privacy Policy due to the development of our website and its offers or due to any changes to statutory or regulatory requirements. You can access and print our Privacy Policy as amended at any time at our website at lanes.pm
Last modified: February 2025