Controller
Elve Kaasik. For questions, write to [email protected].
What we collect
- Name, e-mail and phone number: to send the order confirmation, invoice and delivery notices.
- Parcel locker or delivery address: to deliver the lantern.
- Company name and registry code if you buy as a company: to make out the invoice.
- The order contents, amount, reference number, note and order language.
- Messages sent through the contact form, with your name and e-mail: to reply.
- Payment details from the bank statement (payer name, amount, date, description): to match the payment to the order.
Why, and on what basis
- Performing the contract: taking the order, invoicing, delivery and customer support.
- Legal obligation: invoices and accounting records must be kept.
- Legitimate interest: preventing abuse (for example rate-limiting the order and contact forms).
We never use order data for newsletters or advertising.
Who we share it with
- The parcel carrier you choose (Omniva or SmartPosti) or the courier: name, phone, e-mail and delivery point.
- The e-mail delivery service: ZeptoMail (Zoho Corporation).
- Web hosting: Hetzner Online GmbH, data centre in Germany (EU).
- Delivering and protecting web traffic, and visit statistics: Cloudflare, Inc.
- The accountant, where needed to meet legal obligations.
How long we keep it
- Invoices and the related order data: 7 years, as the Estonian Accounting Act requires.
- Contact details of expired or cancelled orders: [KINNITA: retention period].
Cookies and browser storage
Your basket is kept in your own browser’s storage (localStorage) so it survives page changes. We use no analytics or advertising cookies.
We count visits with Cloudflare Web Analytics, which uses no cookies and doesn’t track individual visitors: we only see totals, such as visits per day and pages viewed.
Your rights
You may ask for a copy of your data, have it corrected, ask for it to be deleted (unless the law requires us to keep it), restrict or object to processing, and receive it in a machine-readable form. Write to [email protected]. If you believe your rights have been violated, you may contact the Estonian Data Protection Inspectorate (aki.ee).
See also the terms of sale.