Privacy Policy

1.1. The controller of personal data is Helge Kodu OÜ, registration code 11768796, registered address Rohu tn 21a-3, Põhja-Tallinn, 10612 Tallinn, Harju county, Estonia, service address Telliskivi 60a/A5, 10412 Tallinn, Estonia, email helgekodu@gmail.com, phone +372 5817 6831.

2.1. The online store may process the customer's name, phone number, email address, delivery and billing address, order, purchased goods and services and participation details, payment status and payment references, information concerning enquiries, complaints and returns, and technical website and cookie data where used. The online store does not have access to the Buyer's full bank or card details.

3.1. Personal data is processed to accept and fulfil orders, including delivering goods and gift cards and arranging participation in workshops or courses. Data is also processed for payments, accounting, customer service, returns and complaints, and for establishing, exercising or defending legal claims based on the online store's legitimate interest.

3.2. Data required for an order is processed to enter into and perform a contract. Accounting data is processed to comply with legal obligations. Direct marketing is based on consent or another lawful basis.

4.1. Personal data is disclosed only as necessary to provide the service or comply with law, including to payment, delivery, online store, hosting, email, IT and accounting service providers and competent authorities.

4.2. Payments are intermediated by Maksekeskus AS, registration code 12268475, address Liivalaia tn 45, Kesklinn, 10145 Tallinn, Harju county, email support@maksekeskus.ee. Payment initiation and payment data processing take place in the secure environment of Maksekeskus AS. Helge Kodu OÜ has no access to the Buyer's bank authentication data.

4.3. Service providers process data on behalf of the online store or as independent controllers under their own terms. The online store does not sell personal data.

4.4. Transfers outside the European Economic Area use safeguards required by law.

5.1. Order and accounting data is generally retained for 7 years from the end of the relevant financial year unless a longer period is required by law.

5.2. Correspondence, complaints and return information is kept as long as needed to resolve the matter and protect possible legal claims.

5.3. Newsletter data is kept until consent is withdrawn. Technical data is retained according to the periods of the services and cookies used.

6.1. Newsletters and offers are sent only with consent or another lawful basis.

6.2. The recipient can unsubscribe through the link in the email or by writing to helgekodu@gmail.com. Withdrawal of consent does not affect the lawfulness of earlier processing.

7.1. The website may use essential cookies needed for the online store to function. Analytics and marketing cookies are used only with consent if such cookies are in use.

7.2. Cookie choices can be changed in website cookie settings or in the browser. Disabling essential cookies may prevent the online store from working correctly.

8.1. A person has the right to receive information about processing and access their data, request correction, erasure or restriction where legally applicable, object to processing based on legitimate interest, receive submitted data in machine-readable form where portability applies, withdraw consent, and complain to the Estonian Data Protection Inspectorate at https://www.aki.ee.

8.2. To exercise these rights, write to helgekodu@gmail.com. The online store may request additional information to verify identity.

9.1. The online store applies appropriate organisational and technical safeguards to protect personal data.

9.2. This policy may be changed when services or laws change. The current version is published at https://www.helgekodu.ee.