Privacy Policy

1. Data controller

The controller of personal data is Clarte OÜ, registry code 17324853, address Veerenni 55, e-mail info@clarte.ee.

2. What data we collect

We collect only the data necessary to fulfil the order, provide customer service and operate the online store:

  • name;
  • delivery address;
  • e-mail address;
  • phone number;
  • order contents and order history;
  • payment-related information, such as payment status;
  • customer service correspondence;
  • technical data on the use of the online store, such as IP address, cookies and session data.

Card and bank account details are processed by the payment service provider. Clarte OÜ does not store complete card or bank account details on its servers.

3. Why we process data

We process personal data on the following legal bases:

  • Performance of a contract – processing the order, confirming payment, delivery and customer service.
  • Legal obligation – fulfilling accounting and tax obligations.
  • Legitimate interest – security of the online store, fraud prevention and protection of rights.
  • Consent – sending marketing e-mails and using statistics and marketing cookies.

4. How long we retain data

  • Order and accounting-related data: 7 years from the end of the financial year.
  • Customer service correspondence: up to 3 years.
  • Marketing-related data: until consent is withdrawn.
  • Cookie data: in accordance with the retention period specified in the cookie settings.

If the law requires longer retention or the data is necessary for the protection of legal claims, we retain the data to the extent permitted by law.

5. Who we share data with

We transfer data only to the extent necessary to provide the service:

  • to the payment service provider for processing the payment;
  • to the delivery or courier service provider for delivering the parcel;
  • to providers of e-store software, web hosting and IT services;
  • to the accountant or accounting software provider;
  • to state authorities, where required by law.

Personal data is not sold or transferred to third parties for their independent marketing activities.

6. Transfer of data outside the European Union

Personal data is generally processed within the European Union and the European Economic Area. If a service provider processes data outside the European Union or the European Economic Area, we ensure protection in accordance with GDPR requirements, for example by means of the European Commission’s standard contractual clauses.

7. Your rights

You have the right at any time to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of data where there is no legal basis for processing;
  • request restriction of data processing;
  • receive your data in a machine-readable format;
  • object to the processing of data on the basis of legitimate interest;
  • withdraw consent where processing is based on consent.

To exercise your rights, write to the e-mail address info@clarte.ee. We will respond to your request within one month at the latest, unless the law permits or requires a different deadline.

8. Marketing e-mails

We send marketing e-mails only if you have given separate consent. Consent can be withdrawn at any time using the unsubscribe link in the e-mail or by writing to info@clarte.ee.

9. Cookies

We use cookies to operate the online store, manage the cart and session, and improve the usability of the website.

Necessary cookies are required for the online store to function. We use statistical and marketing cookies only with your consent.

Cookies can be managed in the cookie settings shown on your first visit to the page, or through your browser settings.

10. Filing a complaint

If you find that your personal data has been processed unlawfully, please first contact us at info@clarte.ee.

You have the right to file a complaint with the Data Protection Inspectorate. More info: aki.ee.

~