Privacy Policy

This privacy policy regulates the principles and procedure for processing personal data in the SPA Sanitaartehnika OÜ (hereinafter: Seller) e-store. When processing personal data, we rely on Estonian and European Union legislation, ensuring the privacy and data protection of the client (hereinafter: Buyer).

1. General provisions and legal basis

The Seller processes personal data in accordance with the following legislation:

2. Personal data processed

The Seller collects and processes the following data through the e-store:

  • Identification data: first name and surname.
  • Contact details: email address, phone number, delivery address.
  • Purchase transaction data: ordered products (sanitary accessories, bathroom textiles), payment method, purchase amount and order history.
  • Network identifiers: client IP address and cookies.

3. Purposes of processing personal data

  • Performance of contract: Conclusion of sales contract, delivery of goods and communication with the client (GDPR Art 6 (1) (b)).
  • Legal obligation: Fulfillment of accounting obligation (GDPR Art 6 (1) (c) and Accounting Act).
  • Legitimate interest: Analysis of service quality and ensuring e-store security.
  • Direct marketing: Sending offers only if the Buyer has given explicit consent.

4. Transmission of data to third parties

The Seller transmits personal data to third parties only to the extent absolutely necessary for the provision of the service:

  • Logistics partners: (e.g. AS Eesti Post, Itella Estonia OÜ) for transport of goods.
  • Payment solution providers: for mediating and checking payments.
  • Accounting service: for processing financial documents.

5. Data retention

  • Original accounting documents: according to the law, 7 years from the end of the financial year.
  • Client account data: until the account is closed or at the client's request, unless otherwise provided by law.
  • Direct marketing consents: until consent is withdrawn.

6. Buyer's rights

In accordance with the General Data Protection Regulation, the Buyer has the right to:

  1. Access their data and obtain a copy of it.
  2. Rectify inaccurate or incomplete data.
  3. Request erasure of data (right to be forgotten), if there is no legal basis for processing.
  4. Restrict data processing or submit objections.
  5. Data portability to another service provider.

7. Dispute resolution

In case of questions or claims regarding the processing of personal data, please contact the Seller at info@spanet.ee. If the Buyer finds that their rights have been violated, they have the right to turn to the Data Protection Inspectorate (Tatari 39, Tallinn 10134; info@aki.ee).

Data Controller:
SPA Sanitaartehnika OÜ
Registry code: 10921899
Address: Rävala pst 19, 10143 Tallinn