Privacy Policy

Last updated: 29.09.2025

1. General Provisions

This Privacy Policy describes how PartStall OÜ (registry code 11715268, address: Indreku tee 12, Rae küla, Rae vald, Harjumaa, Estonia) collects, uses, stores, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Estonian law.

2. Data Controller

The data controller is PartStall OÜ. All data protection inquiries should be sent to: info@partstall.ee

3. Processed Personal Data

We process the following categories of data:

Account data: name, email, phone number, password (encrypted).
Delivery and billing data: address, company name, registry code (if applicable).
Order and payment data: purchased products, payment method, delivery method.
Payment information: payment confirmation data (via Montonio Finance OÜ).
Customer communication: inquiries, complaints, returns.
Technical data: IP address, device information, cookie preferences.
Marketing data: newsletter preferences, CRM profiles, campaign history.

4. Purposes and Legal Basis

We process personal data for the following purposes:

Fulfillment of contracts: processing and delivery of orders.
Payment processing via Montonio Finance OÜ.
Customer service and warranty handling.
CRM management and personalized offers (based on legitimate interest).
Marketing and newsletters (based on consent).
Use of cookies and analytics (based on consent and legitimate interest).
Accounting and compliance with legal obligations.

5. Data Sharing

We do not sell or rent personal data. Data is shared only with:

Montonio Finance OÜ – for payment processing.
Delivery partners (Omniva, Smartpost, Venipak, DPD Eesti).
IT service and CRM providers.
Public authorities where required by law.

When data is transferred outside the EU, EU Standard Contractual Clauses are applied.

6. Data Retention

Account data: until account deletion or 3 years after last activity.
Order and payment data: 7 years (accounting law).
Customer support communication: 3 years from resolution.
Marketing data: until consent is withdrawn.
Cookies and analytics data: 26 months.
Technical logs: 12 months.

7. Cookies and Tracking Technologies

We use cookies and similar technologies:

Necessary cookies: for website operation.
Statistical and analytical cookies: for traffic analysis.
Marketing cookies: for personalized advertising.

Our website may use third-party cookies (e.g., Google, Facebook, YouTube) that allow displaying integrated content and analyzing web usage. These cookies are subject to the respective service providers’ privacy policies.

Users can manage cookie preferences via our consent management tool.

8. Data Subject Rights

You have the right to:

Access and obtain a copy of your data.
Request correction or deletion.
Restrict processing.
Withdraw consent for marketing.
Object to profiling in CRM.
Receive data in a machine-readable format and transfer to another provider.

To exercise your rights, email info@partstall.ee We will reply within 1 month.

9. Security Measures

We apply technical and organizational measures:

HTTPS and TLS encryption.
Restricted access for authorized staff only.
Regular backups and system updates.
Data breach response procedures.

10. Profiling and Automated Decisions

CRM systems may be used for personalized offers. This does not significantly affect your rights or obligations. You may opt out of such profiling.

11. Changes to the Privacy Policy

We may update this policy in line with legal or service changes. The latest version will always be published on our website, and significant changes will be notified via email.

12. Contact

If you have questions or wish to exercise your rights, contact us:

PartStall OÜ
Registry code: 11715268
Address: Indreku tee 12, Rae küla, Rae vald, Harjumaa, Estonia
Email: info@partstall.ee