1. General provisions

This Privacy Policy governs the principles related to the collection, processing, and storage of personal data. Personal data is collected, processed, and stored by the data controller Enviluxe OÜ (hereinafter referred to as the “Data Controller”).

For the purposes of this Privacy Policy, a data subject is a customer or any other natural person whose personal data is processed by the Data Controller.

A customer, within the meaning of this Privacy Policy, is any person who purchases goods or services from the Data Controller’s website.

The Data Controller processes personal data in accordance with applicable laws, ensuring that personal data is processed lawfully, fairly, and securely. The Data Controller is able to confirm that personal data has been processed in compliance with applicable legislation.

2. Collection, processing and storage of personal data

Personal data collected, processed, and stored by the Data Controller is collected electronically, primarily through the website and email communication.

By sharing personal data, the data subject grants the Data Controller the right to collect, organise, use, and manage personal data for the purposes defined in this Privacy Policy when purchasing goods or services through the website.

The data subject is responsible for ensuring that the information provided is accurate, correct, and complete. Providing knowingly false information is considered a violation of this Privacy Policy. The data subject is obliged to notify the Data Controller immediately of any changes to the submitted data.

The Data Controller is not liable for any damage caused to the data subject or third parties as a result of the submission of incorrect data by the data subject.

3. Processing of customers’ personal data

The Data Controller may process the following personal data of the data subject:

• first and last name;
• telephone number;
• email address;
• delivery address;
• payment-related information (payments are processed via authorised payment service providers; the Online Store does not store payment card details).

The legal basis for processing personal data is Article 6(1) of the General Data Protection Regulation (GDPR), including consent, performance of a contract, compliance with a legal obligation, and legitimate interest.

Personal data is processed for the following purposes:

• processing and fulfilling orders;
• ensuring the operation of the online store;
• customer support and communication;
• accounting and financial obligations;
• marketing communications (only with the customer’s consent).

The Data Controller may share personal data with authorised processors, such as delivery service providers, accounting service providers, and payment service providers.
Personal data necessary for processing payments is transferred to the authorised processor Maksekeskus AS.

The Data Controller applies appropriate organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing.

Personal data is stored only for as long as necessary to fulfil the purposes of processing or as required by law.

4. Rights of the data subject

The data subject has the right to:

• access their personal data;
• receive information about the processing of their personal data;
• request correction of inaccurate data;
• withdraw consent at any time where processing is based on consent.

To exercise their rights, the data subject may contact the Data Controller by email at info@envi.ee.

The data subject has the right to submit a complaint to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

5. Final provisions

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), the Estonian Personal Data Protection Act, and other applicable legislation of the Republic of Estonia and the European Union.

The Data Controller has the right to amend this Privacy Policy partially or fully by publishing the updated version on the website www.envi.ee.