PR Permanent PMU

Privacy Policy

1. Data controller

The controller of personal data is Clarte OÜ, registry code 17324853, address Veerenni 55, e-mail info@clarte.ee.

2. What data we collect

We collect only the data that is necessary to fulfil an order, to provide customer service and for the operation of the online store:

  • name;
  • delivery address;
  • e-mail address;
  • telephone number;
  • the content of the order and order history;
  • payment-related information, for example the payment status;
  • customer service correspondence;
  • technical data on the use of the online store, for example IP address, cookies and session data.

Card and bank account data is processed by the payment service provider. Clarte OÜ does not store complete card or bank account data on its servers.

3. Why we process data

We process personal data on the following legal bases:

  • Performance of a contract – processing the order, confirming the payment, delivery and customer service.
  • Legal obligation – fulfilment of accounting and tax obligations.
  • Legitimate interest – the security of the online store, the prevention of fraud and the protection of rights.
  • Consent – sending marketing e-mails and the use of statistics and marketing cookies.

4. How long we retain data

  • Order and accounting-related data: 7 years from the end of the financial year.
  • Customer service correspondence: up to 3 years.
  • Marketing-related data: until consent is withdrawn.
  • Cookie data: in accordance with the retention period indicated in the cookie settings.

If the law requires longer retention or the data is necessary for defending legal claims, we retain the data to the extent permitted by law.

5. With whom we share data

We transfer data only to the extent necessary for providing the service:

  • to the payment service provider for processing the payment;
  • to the delivery or courier service provider for delivering the parcel;
  • to providers of online store software, web hosting and IT services;
  • to the accountant or the provider of accounting software;
  • to state authorities where this is required by law.

Personal data is not sold or transferred to third parties for their independent marketing activities.

6. Transfer of data outside the European Union

Personal data is generally processed within the European Union and the European Economic Area. If a service provider processes data outside the European Union or the European Economic Area, we ensure protection in accordance with the requirements of the GDPR, for example by means of the European Commission’s standard contractual clauses.

7. Your rights

You have the right at any time to:

  • access your personal data;
  • request the correction of inaccurate data;
  • request the erasure of data if there is no legal basis for the processing;
  • request the restriction of data processing;
  • receive your data in a machine-readable format;
  • object to the processing of data on the basis of legitimate interest;
  • withdraw consent where the processing is based on consent.

To exercise your rights, write to the e-mail address info@clarte.ee. We will respond to the request within one month at the latest, unless the law permits or requires a different deadline.

8. Marketing e-mails

We send marketing e-mails only if you have given separate consent for this. Consent can be withdrawn at any time by using the unsubscribe link contained in the e-mail or by writing to the address info@clarte.ee.

9. Cookies

We use cookies for the operation of the online store, for managing the shopping cart and the session, and for improving the usability of the website.

Necessary cookies are required for the operation of the online store. We use statistics and marketing cookies only with your consent.

Cookies can be managed in the cookie settings that are displayed on the first visit to the page, or via the browser settings.

10. Submitting a complaint

If you find that your personal data has been processed unlawfully, we ask you to contact us first at the address info@clarte.ee.

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Further information: aki.ee.