Privacy Policy

1. General provisions

1.1. Data controller

This privacy policy regulates the principles for collecting, processing, and storing personal data. The data controller responsible for personal data is Profiasitek OÜ (hereinafter the “Data Processor”).

1.2. Data subject

In the context of this privacy policy, the data subject is a customer or another natural person whose personal data the Data Processor processes.

1.3. Definition of customer

A customer is a person who purchases products from the Data Processor’s web shop or contacts the Data Processor via email, telephone, or a web form.

1.4. Legal framework

When processing personal data, the Data Processor complies with requirements arising from the legal acts of the European Union and the Republic of Estonia, including lawful, fair, and secure processing of personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Collection and processing of personal data

2.1. Definition of personal data

Personal data is data that allows a natural person to be identified directly or indirectly.

2.2. Methods of collection

Personal data is collected and processed mainly electronically via the web shop, email, and telephone.

2.3. Legal bases for providing data

The data subject provides their personal data to the Data Processor during the following activities:

  • when submitting an order or inquiry in the web shop or by email;
  • when filling out the contact form;
  • when purchasing goods or following up on them;
  • when submitting a hire-purchase application (via the payment service provider);
  • when using the website via cookies.

2.4. Responsibility of the data subject

The data subject is responsible for the accuracy, precision, and completeness of the submitted data and undertakes to inform the Data Processor of any changes to the data.

3. Personal data processed

3.1. Identified data

The Data Processor may process the following personal data:

  • first and last name;
  • personal identification code (if needed);
  • telephone number;
  • email address;
  • delivery and billing address;
  • postal code;
  • payment and order-related data.

3.2. Non-identified data

The Data Processor is entitled to collect non-identified data as well (e.g., language preference, location, device type), which is used for statistical purposes and to improve the service.

4. Legal basis for processing personal data and purposes

4.1. Legal bases

The legal bases for processing personal data are the points of Article 6(1) of the GDPR:

a) the data subject’s consent; b) performance of a contract or actions prior to entering into a contract; c) compliance with a legal obligation; f) the Data Processor’s legitimate interest.

4.2. Purposes of processing

Personal data is processed for the following purposes:

  • processing orders and inquiries;
  • delivering and handing over goods;
  • customer communication;
  • accounting and fulfilling financial obligations;
  • ensuring the operation and security of the web shop;
  • fulfilling obligations arising from law.

5. Disclosure of personal data to third parties

5.1. Principles of disclosure

The Data Processor may disclose personal data to third parties only to the extent necessary to provide the service or to fulfill obligations arising from law.

5.2. Third parties

Third parties may include:

  • transport and logistics companies;
  • payment service and installment (hire-purchase) providers;
  • accounting service providers;
  • IT and web hosting service providers;
  • guarantee partners and maintenance partners.

5.3. Obligation of confidentiality

Third parties are required to keep the data provided to them confidential and process it in accordance with applicable legal acts.

6. Retention of personal data

6.1. Retention periods

Personal data is retained in accordance with the purpose of processing, but no longer than 5 years from the last order or customer communication.

6.2. Obligations arising from law

Data that the Data Processor is required to retain under accounting or other legal acts is retained for the period specified by law.

7. Protection and security of personal data

7.1. Security measures

The Data Processor implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

7.2. Access restrictions

Access to personal data is granted only to authorized persons.

7.3. Notification of security incidents

In case of suspicion regarding misuse or leakage of personal data, please notify the Data Processor immediately.

8. Rights of the data subject

8.1. List of rights

The data subject has the right to:

  • access their personal data;
  • receive information about the processing of personal data;
  • request correction of inaccurate data;
  • withdraw consent if processing is based on consent;
  • request deletion of personal data or restriction of processing;
  • raise objections to the processing of personal data;
  • file a complaint with the Data Protection Inspectorate.

8.2. Exercising rights

To exercise your rights, please contact us at the email address risto@asitek.ee.

9. Cookie policy

9.1. General information about cookies

9.1.1. Definition of cookies

Cookies are small text files that are stored on your device (computer, smartphone, tablet) when you visit a website.

9.1.2. Purposes of using cookies

Cookies are used to ensure the proper functioning of the website, improve user experience, collect statistics, and personalize advertising.

9.1.3. Connection to the privacy policy

This cookie policy is a part of the privacy policy and supplements it.

9.2. Types of cookies

9.2.1. Essential cookies

9.2.1.1. General description

These cookies are essential for the proper functioning of the website and cannot be disabled.

9.2.1.2. Cookies in use

Essential cookies include:

Popup cookies – cookies that store your privacy and cookie consent options and ensure that the cookie notification does not appear repeatedly after you have saved your preferences.

9.2.1.3. Privacy protection

These cookies do not collect identified information or monitor your activity on the web.

9.2.1.4. Legal basis

Performance of a contract and the Data Processor’s legitimate interest (GDPR Article 6(1) points b and f).

9.2.2. Analytical cookies

9.2.2.1. General description

These cookies collect information about how you use our website. All data is anonymized and cannot be used to identify you.

9.2.2.2. Services in use

Analytical cookies include:

Google Analytics – Google’s web analytics service that collects anonymous statistics about website visits, page views, user behavior, and demographic data. It helps us understand how visitors use our website and improve user experience.

Sourcebuster.js – an analytical tool that tracks the sources of website visitors (e.g., search engine, direct link, social media) to understand how users reach our website.

9.2.2.3. Consent requirement

The use of these cookies requires your prior consent.

9.2.2.4. Legal basis

The data subject’s consent (GDPR Article 6(1) point a).

9.2.3. Advertising cookies

9.2.3.1. General description

These cookies are used to change advertising content so that it is more relevant and interesting to you.

9.2.3.2. Operating principle

Advertising cookies may track your activity on different websites and create a profile of your interests to display personalized advertising.

9.2.3.3. Consent requirement

The use of these cookies requires your prior consent.

9.2.3.4. Legal basis

The data subject’s consent (GDPR Article 6(1) point a).

9.3. Managing cookies and granting consent

9.3.1. Preferences panel

You can manage your cookie preferences in the privacy options panel, which is displayed the first time you visit the website.

9.3.2. Changing preferences

You can review and change your choices at any time by opening the privacy options panel again in the website footer or on the privacy policy page.

9.3.3. User rights

You have the right to:

  • give consent to use all or some categories of cookies;
  • refuse the use of non-essential cookies;
  • change your preferences at any time;
  • withdraw your consent.

9.3.4. Exception for essential cookies

Essential cookies cannot be disabled because they are necessary for the website’s core functions to work.

9.4. Cookie validity period

9.4.1. Session cookies

Session cookies are automatically deleted after you close your browser.

9.4.2. Persistent cookies

Persistent cookies remain stored on your device until their validity period expires or until you manually delete them.

9.4.3. Duration of validity period

The validity periods of different cookies may vary from a few days to two years.

9.5. Deleting cookies from the browser

9.5.1. Browser settings

Most web browsers automatically accept cookies, but you can disable cookies or set your browser to notify you about cookies in your browser settings.

9.5.2. Instructions for different browsers

Instructions for managing cookies in different browsers:

  • Google Chrome: Settings → Privacy and security → Cookies and other site data
  • Mozilla Firefox: Settings → Privacy and security → Cookies and site data
  • Safari: Preferences → Privacy → Cookies and website data
  • Microsoft Edge: Settings → Cookies and site permissions → Manage cookies and stored data

9.5.3. Impact on functionality

Please note that blocking or deleting cookies may affect the website’s functionality and user experience.

9.6. Third-party cookies

9.6.1. Integrated services

Our website may have integrated third-party services (e.g., Google Analytics) that use their own cookies.

9.6.2. Privacy policies of service providers

The use of cookies for these services is governed by the relevant service providers’ privacy policies:

9.6.3. Limitation of liability

The Data Processor has no control over third-party cookies and we are not responsible for their privacy practices.

9.7. Purposes of using cookies

Cookies are used for the following purposes:

  • ensuring the technical operation of the website;
  • remembering user preferences and settings;
  • collecting and analyzing website visit statistics;
  • improving user experience;
  • measuring the effectiveness of marketing and advertising;
  • displaying personalized content and advertising.

9.8. Additional information and questions

9.8.1. Contact details

If you have questions regarding the cookie policy and your choices, please contact us at risto@asitek.ee or by phone +372 55670822.

9.8.2. Data Protection Inspectorate

For more information about personal data protection, please visit the Data Protection Inspectorate’s website: https://www.aki.ee

10. Changes to the privacy policy

10.1. Right to modify

The Data Processor has the right to unilaterally modify this privacy policy and the cookie policy.

10.2. Entry into force of changes

The changes will be published on the website and will enter into force upon their publication.

10.3. Informing users

In the case of significant changes, users will be informed via the website or by email.

11. Contact details

Data controller responsible for personal data:

Profiasitek OÜ
Address: Vaskussi 27, Ussimäe, Rakvere Parish 44204, Estonia
Phone: +372 55670822
Email: risto@asitek.ee

Data Protection Inspectorate:
Website: https://www.aki.ee
Email: info@aki.ee