Privacy Policy
This privacy policy explains how we process personal data on the website avivabrik.ee (hereinafter referred to as the “Website”). We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Estonian law.
1. Data controller
Data controller: AVI PUUTÖÖKODA OÜ
Registration number: 10212542
Address: Tartu County, Kastre Parish, Hammaste village, Pöögi-Avi, 62404
Email: email@avivabrik.ee
Telephone: +372 527 9673
If you have any questions regarding the processing of personal data, please contact us using the details provided above.
2. What personal data do we collect?
We collect personal data only to the extent necessary to process enquiries and bookings.
2.1. Via the enquiry form:
- name (if provided),
- email address,
- telephone number (if provided),
- the content of your message and any other information you provide to us.
2.2. Technical data (server logs):
To ensure the technical functioning and security of the website, technical data (e.g. IP address, time of request, browser type, pages visited) may be recorded in server logs. We do not use this data for marketing purposes or to create user profiles.
3. For what purposes and on what legal basis do we process data?
We process personal data for the following purposes:
- Responding to enquiries and customer
communication Legal basis: Article 6(1)( (b) (measures taken prior to entering into a contract) and/or (f) (legitimate interest – customer communication and the organisation of service provision). - Website security and technical operation (logs, attack prevention)
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in ensuring the security and reliability of the service).
We do not process your personal data for the purposes of automated decision-making or profiling.
4. To whom do we disclose data?
We do not sell or rent personal data to third parties.
We may disclose personal data to service providers who assist with the technical management of the Website and communications (processors within the meaning of the GDPR), for example:
- web hosting,
- email service providers.
Service providers may only process data in accordance with our instructions and to the extent necessary.
5. Data retention
We retain personal data only for as long as is necessary to fulfil the purposes described in this policy or to comply with legal obligations.
Typical retention periods:
- enquiries and related correspondence: up to 12–24 months after the last contact,
- booking details: up to 12–24 months after the service has been provided,
- server logs: up to 30–180 days.
(If required, we can specify the retention periods in accordance with your internal procedures.)
6. Data security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure and destruction (including access restrictions, security updates and backups).
7. Your rights
Under the GDPR, you have the right, amongst other things, to:
- to receive information about the processing of your personal data,
- to access your data and obtain a copy,
- to request the rectification of inaccurate data,
- to request the erasure of your data (where applicable),
- to restrict processing,
- object to processing on the grounds of legitimate interests,
- data portability (where applicable).
Please send requests to the email address email@avivabrik.ee. We will generally respond within 30 days.
8. Lodging a complaint
If you believe your rights have been infringed, you have the right to lodge a complaint with the Data Protection Inspectorate: aki.ee.
9. Cookies
This website does not use marketing or analytics cookies. However, technical cookies or similar technologies (e.g. session cookies), as well as server logs, may be necessary for the technical functioning of the website.
10. Changes to the Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be published on the Website.