1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 Thank you for visiting our website and for your interest. This privacy policy informs you about how we handle your personal data when you visit and use our website. Personal data is any information that can be used to identify you directly or indirectly.
1.2 The data controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is: Sinu24 OÜ, Laki 14a-314, 10621 Tallinn, Estonia Email: [email protected]
The controller is the natural or legal person who determines the purposes and means of processing personal data.
2) Data Collection When You Visit Our Website
2.1 When you access our website without registering or submitting information, we only collect the data that your browser sends to our server (“server log files”). This includes:
Visited pages
Date and time of access
Amount of data transmitted
Referring URL
Browser and operating system
IP address (anonymized where required)
This data is processed in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring website functionality and security. Data is not shared or used otherwise unless required for investigations into misuse or unlawful activity.
2.2 This website uses SSL/TLS encryption to protect personal data during transmission. You can identify a secure connection by “https://” and the padlock symbol in your browser.
3) Hosting and Content Delivery
Our website is hosted by a provider whose servers are located within the European Union (DigitalOcean, France or Germany). All data is processed exclusively on EU servers.
We have concluded a data processing agreement with our hosting provider in accordance with Art. 28 GDPR, ensuring that all personal data is handled securely and not disclosed unlawfully.
4) Cookies and Consent Tool
To make your visit more user-friendly, we use cookies (small text files stored on your device). Some cookies are deleted after the session ends (session cookies); others remain and store preferences (persistent cookies).
We use a GDPR-compliant cookie consent solution provided by CookieYes. It allows you to:
Grant or deny consent to non-essential cookies
See what cookies are used
Revoke your consent at any time
Essential cookies are stored based on Art. 6(1)(f) GDPR (legitimate interest in website operation). All other cookies are used only with your explicit consent per Art. 6(1)(a) GDPR.
Please note that disabling cookies may impact functionality.
5) Contacting Us
If you contact us (e.g. via form or email), we collect and store your personal data to process your request.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in handling inquiries) or Art. 6(1)(b) GDPR (pre-contractual steps). Data will be deleted once your request is resolved unless legal obligations require longer retention.
6) Customer Accounts and Orders
When you create a customer account or place an order, we collect personal data necessary for order processing (Art. 6(1)(b) GDPR). Required fields are marked accordingly during registration.
You may delete your customer account at any time. Your data will be erased unless retention is required by law or there is a legitimate interest in keeping it (e.g. fraud prevention).
7) Newsletter
If you subscribe to our newsletter, we will use your email address to send promotional messages.
We use a double opt-in method: you will only receive emails after confirming your subscription via a link in a confirmation email. This ensures your express consent under Art. 6(1)(a) GDPR.
We store your IP address and the date/time of registration to document consent. You can unsubscribe at any time via a link in the email or by contacting us. Your email will be deleted from the list unless you’ve consented to further use.
8) Order Processing and Third Parties
8.1 Shipping We use DHL Express for deliveries. Your name, address, and—if necessary for coordination—your email/phone number will be shared with DHL for delivery purposes under Art. 6(1)(b) or Art. 6(1)(a) GDPR.
You can revoke your consent for data transfer to DHL at any time.
8.2 Payment Processing Payments are processed via Tranzzo (our payment service provider). When you pay, the relevant payment data (e.g. name, card number, IP, transaction ID) is securely shared with Tranzzo in accordance with Art. 6(1)(b) GDPR for the purpose of completing the transaction.
We do not conduct credit scoring or solvency checks.
9) Consent Management Tool
Our website uses the CookieYes platform to manage user consent for cookies and tracking technologies.
Only essential cookies are loaded by default. Other cookies require your consent before they are activated. Consent is logged securely and can be withdrawn at any time.
Processing is based on Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in legal compliance).
10) Your Rights Under GDPR
As a data subject, you have the following rights:
Access to your data (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of consent (Art. 7(3) GDPR)
You may exercise these rights by contacting us at [email protected].
We aim to resolve all requests directly. However, if you believe your rights have been violated, you may file a complaint with a supervisory authority of your choice under Art. 77 GDPR.
11) Data Retention
We retain personal data only as long as necessary for the purpose of collection, or as required by legal retention obligations (e.g. accounting or tax law).
Once the purpose no longer applies, data is deleted unless continued storage is legally justified (e.g. defense against claims).
