top of page

Privacy Policy

​

This Privacy Policy describes how MTÜ Ultraratturite Liit (hereinafter the Data Controller) collects, uses, processes and protects personal data in connection with the website panepanepane.ee and the products and services offered through it. This Privacy Policy complies with the EU General Data Protection Regulation (GDPR).

 

1. General Provisions

1.1. This Privacy Policy governs the processing of personal data by the Data Controller when using the website panepanepane.ee.

1.2. A data subject is a natural person whose personal data is processed by the Data Controller (e.g. a customer or website visitor).

1.3. The Data Controller processes personal data in accordance with applicable legislation, including the GDPR.

 

2. Collection and Processing of Personal Data

2.1. The Data Controller collects personal data primarily:

  • when placing an order

  • when submitting a contact form

  • when creating a user account (if applicable)

  • via email or other communication channels

  • automatically through technical data generated by website usage

2.2. The data subject provides personal data voluntarily and confirms that the submitted data is accurate, complete and up to date.

 

3. Types of Personal Data Processed

The Data Controller may process the following personal data:

  • first and last name

  • email address

  • phone number

  • postal address

  • order and purchase details

  • payment-related data (payment method, amount; card data is not processed by the Data Controller)

  • IP address

  • device and browser technical data

  • any other data voluntarily provided by the data subject

 

4. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

  • receiving, processing and fulfilling orders

  • providing services

  • payment processing

  • customer communication and support

  • compliance with legal obligations (e.g. accounting)

  • improving website functionality and user experience

  • ensuring security and preventing fraud

The legal basis for processing personal data is:

  • performance of a contract

  • consent of the data subject

  • compliance with a legal obligation

  • legitimate interest of the Data Controller

 

5. Payment Data Processing

5.1. Payments are processed by Maksekeskus AS.

5.2. Personal data necessary for payment processing is transferred to Maksekeskus AS, which acts as an authorised processor.

5.3. The Data Controller does not process or store payment card details or online banking authentication data.

 

6. Data Retention

6.1. Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

6.2. Accounting-related data is retained in accordance with applicable legislation.

 

7. Disclosure of Personal Data to Third Parties

7.1. The Data Controller may disclose personal data to:

  • Maksekeskus AS for payment processing

  • IT and hosting service providers

  • accounting and legal service providers

  • public authorities where required by law

7.2. Personal data is not sold or rented to third parties.

 

8. Rights of the Data Subject

The data subject has the right to:

  • obtain information about the processing of their personal data

  • access their personal data

  • request correction of inaccurate data

  • request deletion of personal data

  • restrict processing of personal data

  • object to the processing of personal data

  • withdraw consent at any time

  • lodge a complaint with the Data Protection Inspectorate

 

9. Cookies

9.1. The website uses cookies to improve user experience and collect usage statistics.

9.2. The data subject may restrict or disable cookies in their web browser settings.

 

10. Data Security

The Data Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

 

11. Amendments to the Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy. The current version is always available on the website panepanepane.ee.

bottom of page