Privacy Policy

Keefirivunts OÜ values your privacy and complies with all applicable laws and regulations regarding any personal data we may collect about you when you visit our website keefirivunts.ee. By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

This Privacy Policy explains what data we collect, how we use it, on what legal basis we process it, when we may share it, and what rights you have regarding your personal data. This policy applies to our website and its visitors and does not apply to data collected through other channels unless stated otherwise in this document.

Data Controller: Keefirivunts OÜ

Registry code: 14253041

Website: https://keefirivunts.ee

Email: info@keefirivunts.ee

We collect and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian legislation.

1. Collection and Use of Data

1.1. What data we collect

The information we collect includes both information you knowingly and actively provide to us when using our services (for example when placing an order or contacting us), as well as technical information your device sends when you access our website (such as IP address, cookies, and logs).

Your personal data may reach us in the following ways:

when you place an order in our online store at keefirivunts.ee
when you create an account or log in
when you contact us by email, phone, or via a web form/chat
when you choose payment via bank link/card/other electronic payment method
when you apply for financing/installments (e.g., Inbank) or use a financing calculator
when you subscribe to our newsletter
when you browse our website (cookies and analytics)
when you provide personal data about another person (e.g., recipient of the goods) – you confirm you have the right to do so

1.2. Types of data collected

Personal data

We may collect and process the following personal data (depending on the service):

first and last name
email address
phone number
shipping and billing address (country, city, postal code, etc.)
order details (products, quantities, prices, shipping method, payment method)
payment-related technical information (e.g., transaction identifiers; we do not collect or store your full card details)
communication history (emails, support requests)
newsletter subscription data (consent, unsubscribe status)

Logs and technical data

Our website may store log files. The collected information may include:

IP address
browser type and version
device type and operating system
date and time of access
referring/exit pages
activity on the website (e.g., page views, clicks)

Log data is used to ensure website security, improve our services, and compile statistics. Logs are not intended to directly identify an individual, but in certain cases an IP address may be considered personal data.

Cookies

Our website uses cookies. A cookie is a small text file stored on your device when you visit a website. Cookies help the website function, improve the user experience, and enable analytics and marketing features (where you have provided consent).

Cookies may include:

Necessary cookies – required for the online store to function (e.g., cart, session, security).
Preference cookies – remember choices such as language or other settings.
Analytics cookies – help us understand how the website is used.
Marketing cookies – used to measure and personalize advertising (where consent is given).

You can manage or disable cookies in your browser settings and, where applicable, change your cookie consent choices via the cookie banner. Disabling cookies may affect website functionality.

2. Purposes and Legal Basis for Processing

We process personal data for the following purposes and on the following legal bases:

Contract performance (GDPR Art. 6(1)(b)) – processing orders, shipping, invoicing, customer support, warranty obligations.
Legal obligation (GDPR Art. 6(1)(c)) – accounting and tax compliance, retaining data necessary for dispute resolution.
Legitimate interests (GDPR Art. 6(1)(f)) – website security, fraud prevention, service development, statistics (balanced against your rights).
Consent (GDPR Art. 6(1)(a)) – newsletters, marketing cookies, and certain marketing measurement activities (you can withdraw consent at any time).

3. Sharing and Disclosure of Data

We may share personal data with trusted service providers only to the extent necessary to provide our services, for example:

Payment and financing services (e.g., Montonio) – payment processing, payment methods and, where applicable, financing calculator/application services.
Financing providers (e.g., Inbank) – if you apply for financing/installments; in such case the provider processes your data under its own privacy terms.
Courier and delivery services – to deliver your order (name, phone, address).
IT and hosting providers – to run the website and online store (hosting, email services, security).
Accounting – invoicing and compliance with legal obligations.

We do not sell your personal data. We disclose personal data to third parties only when necessary to provide our services or when required by law.

We may also disclose data:

when necessary to protect our rights, prevent fraud, or ensure security;
when required by a competent authority or by law.

4. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law.

Order and invoicing data – as required for accounting and tax purposes (typically up to 7 years).
Customer communications – until the request is resolved and, where needed, for a reasonable period for dispute resolution.
Newsletter data – until you withdraw consent (unsubscribe).
Logs and security data – typically for a shorter period unless longer retention is required for security purposes.

5. Children’s Data

Our services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will delete it as soon as possible.

6. Your Rights

You have the following rights:

the right to access your personal data and receive a copy of it;
the right to request correction of inaccurate data;
the right to request deletion of your data (where retention is not required by law);
the right to restrict processing in certain cases;
the right to object to processing (including processing based on legitimate interests);
the right to data portability (where processing is based on consent or contract and is automated);
the right to withdraw consent at any time (e.g., newsletters, marketing cookies);
the right to lodge a complaint with the Estonian Data Protection Inspectorate.

To exercise your rights, please contact us at info@keefirivunts.ee. We may request additional information to verify your identity.

7. Data Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.

8. Links to Other Websites

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will publish the updated version on our website and update the “Last updated” date. By continuing to use the website after changes become effective, you acknowledge that you have reviewed the changes.

Last updated: 27/02/2026