PRIVACY POLICY AND PRINCIPLES OF PERSONAL DATA PROCESSING
Last updated 19.02.2026
PRINCIPLES OF DATA PROTECTION AND PROCESSING
- The Seller ensures the protection and use of the Buyer's data, including personal data, in accordance with the terms described in this privacy policy.
- The Seller has the right to process data to the extent necessary for using the online shop, concluding a sales contract, performing a sales contract or ensuring the performance of a sales contract, and for fulfilling obligations arising from law.
- The Seller has the right to send the Buyer notices related to the use of the online shop's services (e.g. order confirmation, delivery information, service and security notices). These notices are not marketing communications.
- The Seller has the right to retain data on shopping carts or orders that the Buyer did not complete during a session, for the purpose of better serving buyers and providing proof of transactions, to the extent necessary for the functioning of the service, providing customer support, and resolving disputes.
- The Seller uses the Buyer's contact details to send marketing emails (newsletters, campaigns, special offers) only if the Buyer has given prior consent. Giving consent is not a precondition for making a purchase.
- The Buyer has the right to withdraw consent given for marketing at any time, by using the unsubscribe option in the marketing email or by sending a corresponding email to the Seller's contact address.
PRIVACY POLICY
- Data controller and contact
The data controller for the Saemeister OÜ website and customer data is Saemeister OÜ.
For questions, please write to: saemeister@saemeister.ee
Saemeister OÜ contact details
Registry code: 10005547
Registered address: Variku 54, 50110, Tartu
Retail store: Aardla 25, 50110, Tartu
Email: saemeister@saemeister.ee
Phone: +372 7303 480
Website: https://saemeister.ee/
- Definitions
2.1. Personal data processing is any action performed on the personal data of a website user or customer, such as collecting, using, storing, organising, correcting, transmitting or deleting data.
2.2. Users are all persons who visit the website, make a purchase, create an account, communicate with us or provide information to Saemeister OÜ.
2.3. Personal data is data collected in the performance of a contract with an individual, in preparation for concluding a contract, or in order to contact them, and which allows the person to be identified directly or indirectly (e.g. name, email, phone, address, order details). - Legal grounds for processing personal data
Saemeister OÜ processes personal data in accordance with the GDPR. The legal basis for data processing is primarily based on the following grounds:
3.1. Consent (GDPR Article 6(1)(a)) – for example, for sending marketing emails and using certain cookies.
3.2. Performance of a contract (GDPR Article 6(1)(b)) – for example, for processing orders, delivering goods, customer service, and resolving returns and warranty cases.
3.3. Legal obligation (GDPR Article 6(1)(c)) – for example, accounting and tax record-keeping requirements.
3.4. Legitimate interest (GDPR Article 6(1)(f)) – for example, ensuring website security, preventing fraud, improving service quality and user experience, and resolving disputes, provided this does not override your rights and interests. - What personal data we collect and how
4.1. The personal data of a loyalty customer or buyer may be collected in the following ways:
4.1.1. By providing contact details (name, postal address, phone number, email address) when making a purchase or placing an order in the online shop or elsewhere (including in-store).
4.1.2. By using the website via a customer account.
4.1.3. By using the website via cookies and similar technologies (according to your cookie choices).
4.1.4. By contacting us (by email, via the contact form, or by other means).
4.2. Categories of data (examples)
4.2.1. Contact details: name, email, phone, address.
4.2.2. Order details: goods/services purchased, quantities, prices, delivery method, payment method, order history, invoices and documents evidencing the transaction.
4.2.3. Account details: login-related data, account settings, preferences.
4.2.4. Communication data – content of enquiries, correspondence and information related to customer service.
4.2.5. Website usage data – visitor statistics, technical data on the device and browser, data collected via cookies (according to your choices).
4.2.6. Consent data – status of marketing consent, time and channel of giving consent, and withdrawal information.
- Use of personal data (purposes)
5.1. Processing orders and performing the contract: placing orders, processing payments, arranging delivery, customer service, returns, warranties.
5.2. Communicating with the customer: responding to enquiries, service notices, security and user convenience notices.
5.3. Improving customer relations: improving service quality, developing user convenience, statistics and analysis.
5.4. Compliance with and defence of legal claims: accounting and tax record-keeping, dispute resolution, bringing or defending claims.
5.5. Marketing by email (only with consent): product news, campaigns, special offers and event notifications, including interest-based offers, provided you have given your consent for this.
Important: giving marketing consent is not a precondition for making a purchase. Without marketing consent, we will only send notices necessary for fulfilling your order and for the service to function.
- Marketing consent in-store (at the checkout) and withdrawal
6.1. We only send marketing emails if you have given prior consent.
6.2. If consent is requested verbally at the checkout in-store, we record your consent in our customer database. To evidence consent, we retain at least:
6.2.1. consent status (yes or no)
6.2.2. the time consent was given
6.2.3. the channel through which consent was given (e.g. checkout or online shop)
6.2.4. point of sale or service location
6.2.5. the version of the consent wording
6.3. You can withdraw your consent at any time, free of charge:
6.3.1. via the unsubscribe option at the bottom of the marketing email
6.3.2. by sending an email to the address saemeister@saemeister.ee
6.4. Withdrawal takes effect as soon as possible. After withdrawal, marketing emails will no longer be sent. - Disclosure of personal data to third parties
7.1. A third party is a contractual partner of Saemeister OÜ that processes personal data and through whose product or service Saemeister OÜ provides services to the user. All disclosures of data to third parties are carried out in accordance with GDPR requirements and only to the extent necessary.
7.2. The main third parties may include:
7.2.1. Logistics partners – delivery of goods
7.2.2. Payment service providers – payment processing
7.2.3. IT and hosting service providers – operation of the website and systems, development, maintenance
7.2.4. Analytics and marketing platforms (e.g. Google Analytics, Meta/Facebook Pixel) – measuring website usage statistics and marketing performance according to your cookie choices
7.2.5. Technical service providers for marketing emails – sending newsletters only if you have given marketing consent - Retention of personal data
Saemeister OÜ retains personal data for as long as necessary to fulfil the purpose or as required by law, or until consent is withdrawn, where the basis for processing is consent.
General retention principles (examples):
8.1. Order data and billing: 7 years (accounting requirements).
8.2. Enquiries and customer communication: generally up to 3 years from the last contact, unless a longer retention period is required to resolve a dispute.
8.3. Website visitor statistics: generally up to 26 months (or according to the settings of the service used and your consent).
8.4. Marketing consent records: for as long as the consent is valid, and for a reasonable period after withdrawal, in order to evidence the withdrawal and prevent mistaken re-addition to the marketing list.
- Protection and security of personal data
9.1. To protect customers' personal data, we implement reasonable technical and organisational measures. Access to modify and process personal data is granted only to persons authorised to do so.
9.2. All personal data obtained during the course of visiting the online shop and making purchases is treated as confidential information.
9.3. An encrypted data communication channel with banks and payment service providers helps ensure the security of the buyer's personal data and payment information.
9.4. Security measures may include, among others: SSL encryption, regular security updates, access control, backups and logging. - Your rights under the GDPR
You have the right, at any time, to:
10.1. Right of access – to obtain information on whether and which of your personal data we process.
10.2. Right to rectification – to request the correction or completion of personal data.
10.3. Right to erasure – to request the deletion of personal data, where a legal basis for this exists.
10.4. Right to restriction of processing – to request the restriction of the processing of personal data, where a legal basis for this exists.
10.5. Right to data portability – to receive your data in a structured, commonly used and machine-readable format, where a legal basis for this exists.
10.6. Right to object – to object to the processing of data where we process data on the basis of legitimate interest.
10.7. Right to withdraw consent – to withdraw your consent at any time (e.g. for marketing, certain cookies), without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please write to saemeister@saemeister.ee. If you believe that your rights have been violated in the processing of personal data, you have the right to contact the Estonian Data Protection Inspectorate.
- Cookies and tracking technologies
11.1. Cookies are used on the Saemeister.ee website to ensure a better user experience, the functioning of the website, security, to collect usage statistics and to measure marketing performance, in accordance with applicable requirements.
11.2. A cookie is a small text file that the browser saves to the device used by the customer. Cookies are used to collect information about how the customer uses the website, in order to make using the website more personal and user-friendly. Cookies may be created by various service providers, for example Google and Meta (Facebook). Cookie files are not dangerous to the computer.
11.3. Cookie categories
11.3.1. Necessary cookies
These cookies are essential for the website to function. They cannot be disabled and do not require your consent.
11.3.2. Functional cookies
Allow the website to remember your choices and provide enhanced features.
11.3.3. Analytical cookies
Help us understand how visitors use our website. These cookies collect information so that we can improve the functioning of the website and the user experience.
11.3.4. Marketing cookies
Used to display adverts and measure their effectiveness.
11.4. Types of cookies by duration
11.4.1. Persistent cookies
Remain on the user's device for a fixed period or until deleted. They may be used, for example, to recognise a returning visitor and to customise the website's content.
11.4.2. Session cookies
Are temporary and disappear when the user leaves the website or closes the browser. They are used, for example, for the website's functions to work.
11.5. Managing cookies
11.5.1. Necessary cookies are always active, as the website may not function correctly without them.
11.5.2. We use analytical and marketing cookies only where required and where you have given consent for this (e.g. via the cookie banner or settings).
11.5.3. You can disable or delete cookies in your browser settings. If cookies are not used, the website may not function correctly.
- Google Analytics and opt-out options
12.1. To collect usage statistics, Saemeister OÜ uses Google Analytics, collecting data on pages visited, time spent on the site and other statistics in accordance with the service provider's terms and your cookie choices.
12.2. Opting out of Google Analytics (browser add-on):
https://tools.google.com/dlpage/gaoptout
The add-on is available for Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Edge browsers. - International transfer of data
Some of our service providers (such as Google and Meta) may process data outside the European Economic Area. Such transfers take place only where appropriate safeguards are in place and the transfer complies with applicable requirements. - Automated decision-making and profiling
Saemeister OÜ does not make decisions that produce significant legal effects concerning you based solely on automated processing. If you have given marketing consent, we may use your purchase history and preferences to provide more relevant offers. You can opt out of marketing at any time. - Changes to the privacy policy
Saemeister OÜ reserves the right to amend this privacy policy by publishing changes on the website. In the case of significant changes, we may additionally notify users by email or via the website. - Filing complaints and Data Protection Inspectorate contact details
If you have questions about your rights, or believe that Saemeister OÜ has violated your rights in the processing of your personal data, please contact us first at the email address saemeister@saemeister.ee.
If you believe that your rights have been violated in the processing of personal data, you have the right to contact the Estonian Data Protection Inspectorate:
Estonian Data Protection Inspectorate
Address: Tatari 39, 10134 Tallinn
Email: info@aki.ee
Advice line: 5620 2341 (Mon–Thu 13.00–16.00)
Website: www.aki.ee