{"id":15,"date":"2026-06-09T21:56:55","date_gmt":"2026-06-09T21:56:55","guid":{"rendered":"https:\/\/oden.ee\/en\/privaatsus\/"},"modified":"2026-10-16T13:13:39","modified_gmt":"2026-10-16T10:13:39","slug":"privaatsus","status":"publish","type":"page","link":"https:\/\/oden.ee\/en\/privaatsus\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Data controller<\/h2>\n\n<p class=\"wp-block-paragraph\">The controller of personal data for the online shop oden.ee is O\u00dc Oden Grupp (registry code 14376878, VAT number (KMKR) EE102027444), address Kassi tn 9, 12618 Tallinn, Estonia, phone +372 5610 3065, email info@oden.ee.<\/p>\n\n<h2 class=\"wp-block-heading\">Personal data we process<\/h2>\n\n<ul class=\"wp-block-list\"><li>name, phone number and email address;<\/li><li>delivery address;<\/li><li>when buying as a company \u2014 company name and registry code;<\/li><li>product prices and payment-related data (purchase history);<\/li><li>details of customer support requests;<\/li><li>website usage data (IP address, device and browser data, necessary cookies).<\/li><\/ul>\n\n<h2 class=\"wp-block-heading\">Purposes of processing<\/h2>\n\n<p class=\"wp-block-paragraph\">Personal data are used to manage orders and deliver goods.<\/p>\n\n<p class=\"wp-block-paragraph\">To process a payment, O\u00dc Oden Grupp transfers the necessary data to the payment service provider chosen by the Customer: card, Apple Pay, Google Pay and other payments via WooPayments \u2014 WooCommerce Ireland Ltd. and its payment partner Stripe Payments Europe, Ltd.; PayPal payments \u2014 PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A.<\/p>\n\n<p class=\"wp-block-paragraph\">Purchase history data (date, product, quantity, customer data) is used for order management, accounting and customer support. Order data is stored in our order management system.<\/p>\n\n<p class=\"wp-block-paragraph\">Refunds are made to the same payment method the Customer used for the purchase.<\/p>\n\n<p class=\"wp-block-paragraph\">Contact details (email, phone, name) are processed to resolve questions related to the sale of goods (customer support).<\/p>\n\n<p class=\"wp-block-paragraph\">IP addresses and other network identifiers are processed to provide the online store service, ensure security and prevent payment fraud.<\/p>\n\n<h2 class=\"wp-block-heading\">Legal basis<\/h2>\n\n<ul class=\"wp-block-list\"><li>performance of a contract \u2014 placing, paying for and delivering the order;<\/li><li>compliance with a legal obligation \u2014 e.g. accounting and resolving consumer disputes;<\/li><li>legitimate interest \u2014 online store security and payment fraud prevention;<\/li><li>consent \u2014 if we start using analytics or marketing cookies in the future (none are used at present).<\/li><\/ul>\n\n<h2 class=\"wp-block-heading\">Recipients of personal data<\/h2>\n\n<ul class=\"wp-block-list\"><li>The online shop&#8217;s customer support \u2014 to manage purchases and resolve customer issues.<\/li><li>Carrier \u2014 for international delivery, Omniva (AS Eesti Post): recipient&#8217;s name, address, phone number and e-mail address. For order collection, no data is passed to a carrier.<\/li><li>Payment service providers \u2014 data necessary for payment and fraud prevention: WooCommerce Ireland Ltd. and Stripe Payments Europe, Ltd. (WooPayments: cards, Apple Pay, Google Pay and local payment methods), and PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A. (PayPal).<\/li><li>Accounting software provider Smart Accounts O\u00dc \u2014 invoice data (buyer&#8217;s name, country, address, phone, e-mail, delivery method, order contents and amount); O\u00dc Oden Grupp keeps its own accounts.<\/li><li>IT service providers (server and e-mail hosting) and the WordPress.com\/Jetpack connection (Aut O&#8217;Mattic A8C Ireland Ltd.) required for WooPayments \u2014 to the extent necessary for the store to operate.<\/li><\/ul>\n\n<p class=\"wp-block-paragraph\">The map on the \u201cContact\u201d page is loaded from the servers of the OpenStreetMap Foundation (United Kingdom). To display the map, the Customer\u2019s browser transmits the Customer\u2019s IP address and technical request data (e.g. browser type) to the OpenStreetMap Foundation. The OpenStreetMap Foundation processes these data as an independent controller under its own privacy policy (osmfoundation.org\/wiki\/Privacy_Policy). The transfer of personal data to the United Kingdom is based on the European Commission\u2019s decision that the United Kingdom ensures an adequate level of protection of personal data.<\/p>\n\n<p class=\"wp-block-paragraph\">If the answer to \u201cDo you need installation?\u201d in the request form (\u201cSend request\u201d, including on the \u201cInstallation\u201d page) is \u201cYes\u201d, O\u00dc Oden Grupp passes the request data (name, phone number and\/or e-mail address, site location, answers, additional information and attached files) to the installation service provider Almasel hooldus O\u00dc (registry code 16835528). The purpose is to prepare an installation quote, arrange a site visit, and conclude and perform the installation contract. The legal basis is taking steps at the Customer\u2019s request prior to entering into a contract, and performance of the contract. Almasel hooldus O\u00dc is the party to the installation contract and processes these data as an independent controller.<\/p>\n\n<p class=\"wp-block-paragraph\">Personal data are passed to processors on the basis of contracts concluded with them. Processors must ensure appropriate safeguards when processing personal data.<\/p>\n\n<h2 class=\"wp-block-heading\">Security and access<\/h2>\n\n<p class=\"wp-block-paragraph\">Personal data is stored on servers located in the European Union or the European Economic Area. Payment service providers may also process data outside the EU; in that case the transfer is based on safeguards recognised by the European Commission (e.g. the EU\u2013US Data Privacy Framework or standard contractual clauses).<\/p>\n\n<p class=\"wp-block-paragraph\">Personal data are accessible to online shop staff who need them to fulfil orders, provide customer support and maintain the shop technically.<\/p>\n\n<p class=\"wp-block-paragraph\">The online shop applies appropriate physical, organisational and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, and unauthorised access or disclosure.<\/p>\n\n<h2 class=\"wp-block-heading\">Cookies<\/h2>\n\n<p class=\"wp-block-paragraph\">The online store uses only necessary cookies and similar technologies: for the shopping cart and checkout, and security and fraud-prevention cookies of payment service providers (Stripe, PayPal) on product pages, in the cart and at checkout. No analytics or marketing cookies are used at present. If we start using them, we will ask for your consent in advance and update this policy.<\/p>\n\n<p class=\"wp-block-paragraph\">The choice you make in the cookie banner is stored in your browser. You can change it at any time via the &#8220;Cookies&#8221; link in the page footer.<\/p>\n\n<h2 class=\"wp-block-heading\">Accessing and correcting your data<\/h2>\n\n<p class=\"wp-block-paragraph\">You can view and correct your data in your user profile. If you purchased without an account, customer support can provide access to your data.<\/p>\n\n<h2 class=\"wp-block-heading\">Withdrawing consent<\/h2>\n\n<p class=\"wp-block-paragraph\">Where processing is based on consent, the Customer may withdraw it at any time \u2014 for cookies via the \u00abK\u00fcpsised\u00bb link, otherwise by notifying customer support by email.<\/p>\n\n<h2 class=\"wp-block-heading\">Data retention<\/h2>\n\n<ul class=\"wp-block-list\"><li>When a customer account is closed, personal data are deleted, except data that must be kept for accounting or to resolve consumer disputes.<\/li><li>In disputes related to payments or consumer rights, data are kept until the claim is settled or the limitation period ends.<\/li><li>Order and invoice data is retained for seven years under the Accounting Act.<\/li><li>Data sent through the request form (\u201cSend request\u201d) \u2014 name, phone or e-mail, property location, answers and attached files \u2014 is used only to reply to the request and prepare an offer. Attached photos and plans are deleted after 90 days, and the request itself after 24 months.<\/li><\/ul>\n\n<h2 class=\"wp-block-heading\">Deletion and portability<\/h2>\n\n<p class=\"wp-block-paragraph\">To have your personal data deleted or transferred, contact customer support by email. We reply within one month at the latest; before releasing data we verify the requester&#8217;s identity.<\/p>\n\n<h2 class=\"wp-block-heading\">Disputes<\/h2>\n\n<p class=\"wp-block-paragraph\">For questions and disputes about the processing of personal data, contact info@oden.ee. The supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), info@aki.ee.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How O\u00dc Oden Grupp processes the personal data of oden.ee customers and uses cookies.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-legal.php","meta":{"footnotes":""},"class_list":["post-15","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/pages\/15","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/comments?post=15"}],"version-history":[{"count":3,"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/pages\/15\/revisions"}],"predecessor-version":[{"id":568,"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/pages\/15\/revisions\/568"}],"wp:attachment":[{"href":"https:\/\/oden.ee\/en\/wp-json\/wp\/v2\/media?parent=15"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}