Privacy policy

We are committed to protecting the privacy of our clients and users. In order to fulfil this commitment, we have prepared this Privacy Policy explaining how we collect, use, disclose, transfer and retain personal data. We use the Internet in accordance with applicable legislation of the European Union and the Republic of Estonia.

Collecting and using personal data

Personal data means any information relating directly or indirectly to you as a natural person, which we collect and process in order to perform a contract concluded with you, to contact you, or to fulfil obligations arising from applicable law.

Personal data may be collected in the following ways:
• when you submit contact details (including your name, personal identification code, postal address, telephone number, e-mail address, preferred communication channel) on our website or at another location (e.g. at our office);
• when you use the web site, we collect data from the client account information or cookies;
• when you make a purchase or place an order in our shop or online store, we store your contact details and information about your purchasing preferences. In certain sections of the website, we may ask you to voluntarily provide personal data such as your name, address, postal code, e-mail address, telephone number or other information.

Additionally, we use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

Using and storing collected personal data

Collected personal data help us share news about products, campaigns and future events with our clients. A client that prefers not to be in our newsletter list or receive notifications can always remove himself or herself from the group of addressees.

We may also use personal data to deliver goods and fulfil contractual obligations.

By accepting this Privacy Policy, the client consents to the automated processing of personal data. Consent may be withdrawn at any time via our homepage or by submitting a request in a format that can be reproduced in writing. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To better service our clients, we may disclose information about individual users to a third party that provides us services and is under a contractual obligation to keep the shared information confidential. For example, a third party may be our partner whose function is to edit content or provide translation services.

We keep the client`s personal data until termination of the relevant client contract. The data that we are required to store subject to legal acts (e.g. accounting data) we keep in accordance with the relevant legal requirements.

Collecting other information

We also collect unidentifiable data, i.e. data that cannot be attributed to a specific person (gender, age, language preference, location).
We may also collect data on how the client uses our web site. These data are aggregated and used to provide our clients with more useful information. These aggregate data help us to learn which parts of the web site and products and services are most interesting for our clients. Aggregate data are deemed unidentifiable data in this privacy policy.

Personal data protection

We take all precautions (incl. administrative, technical and physical measures) to protect the clients’ personal data. Access to personal data is restricted to authorised persons only, who are entitled to access, modify and process such data.

If you believe that your personal data have been processed not in compliance with this privacy policy or there is a threat that your data may have leaked to strangers, please let us know about it immediately. This is the only way we can keep potential damage as little as possible.

The client has the right to demand no further processing of his or her personal data, information about use of the data and transmission of the data to him or her or a third person in a commonly used format. To prevent misuse of client data and protect the client`s rights, applications are allowed to be submitted only in a format that allows identifying the applicant (digitally signed or personally signed at an office). We have the right to respond to such applications within 30 days.

We deem a request to end processing of personal data as an application to terminate the relevant client contract.

Security

All personal data disclosed when visiting our website or entering into contracts are treated as confidential. An encrypted data transmission channel ensures secure exchange of data.

Terms and conditions and amendment of the privacy policy