Privacy policy

01Who processes the data

The data controller is PHPP OÜ (registry code 16130058), Kundoja, Puusepa küla, 65551 Võru vald, Võru maakond. For data protection questions, write to info@uvlambid.ee or call +372 523 5149.

02What data we collect

• Order: name, telephone, e-mail, billing and delivery address, recipient’s name and telephone, name of the company or organisation, registry code, VAT number, procurement or order reference, notes, and the products ordered and amounts.
• Payment: when you pay the invoice, we see the payer’s name, account number and payment description in the bank. We do not collect card or bank link data.
• Enquiry (“Ask for advice” and the contact form): telephone or e-mail, optionally your name and message, and the product or room size if you had selected it.
• Notice of withdrawal: name, e-mail, order number and the goods being returned.
• Technical data: the web server log contains the IP address, time and browser data. To protect the forms against spam, we keep a hash of the IP address for one hour.

03Purposes and legal basis

• Fulfilling the order (invoice, delivery, warranty, return): performance of a contract, General Data Protection Regulation (GDPR) Article 6(1)(b).
• Keeping invoices and accounting documents: legal obligation, point (c).
• Answering enquiries and preparing offers: steps necessary to enter into a contract (point (b)) or our legitimate interest in replying to a request (point (f)).
• Site security and spam prevention: legitimate interest, point (f).

We do not send advertising e-mails without your consent. We do not make automated decisions or carry out profiling.

04Who we share data with

• Courier company: recipient’s name, address and telephone for delivering the goods.
• Zone Media OÜ: hosting of the site, e-mail and our customer management system.
• Accountant: invoices and payments for bookkeeping.
• Bank: receipt of payments and refunds.
• E-invoice operator: if an organisation wants an e-invoice.
• Public authority: where required by law.

We do not sell data or give it out for advertising. Data is not transferred outside the European Union.

05How long we keep data

• Orders, invoices and related correspondence: 7 years from the end of the financial year, as required by the Accounting Act. A notice of withdrawal is part of the order.
• Enquiries that did not lead to an order: up to 3 years after the last contact.
• Server logs: for a short period, according to the hosting provider’s terms.

06Cookies

We use only cookies that are needed for the cart and checkout to work: they remember the contents of the cart and are deleted after two days at the latest. The site has no advertising or analytics cookies or tracking codes, so no consent is required.

07Your rights

You may ask for a copy of your data, have incorrect data corrected, request erasure of your data or restriction of processing, object to processing based on legitimate interest and receive your data in a machine-readable format. Write to info@uvlambid.ee; we will reply within one month. Invoices that the law requires us to keep cannot be deleted before the retention period ends.

If you believe that we are infringing your rights, you may contact the Data Protection Inspectorate (Andmekaitse Inspektsioon).

08Changes

If the processing of data changes, for example if payment by bank link is added, we will update this page. The current version is always here.

This is a translation. In case of a dispute, the Estonian text applies.