the personal data controller of is Karvapall OÜ (reg. 14772918) Peterburi tee 46, tel +372 503 6465, .

To fulfill your order on the online system we need your name, mailing, billing and/or shipping addresses, telephone number, e-mail address. uses this information that you provide to ship your orders, service your account, personalize your experience and to communicate with you.

Karvapall OÜ is the controller of personal data, Karvapall OÜ transmits personal data necessary for making payments to the authorized processor Maksekeskus AS.

What personal data is being processed

  • name, phone number and e-mail address,
  • delivery address;
  • bank account number;
  • cost of goods and services and payment data (purchase history); – Customer support information.

The purpose for which personal data are processed

Personal information is requested to manage customer orders and deliver goods.
Purchase history data (date of purchase, merchandise, volumes, customer details) must be prepared and compiled for customer service personnel.
The bank account number requires the customer to withdraw the payments.
Personal information such as email, phone numbers, customer name, job search process, and provision of customer service related to the service.
The actual use of the web store user IP address or other web store processing the online identifiers as an information society service and web usage statistics.

Legal basis

Personal data are processed for the purpose of executing the contract with the client.
The processing of personal data takes place in order to fulfill a legal obligation (eg accounting and settlement of consumer disputes).
Personal information is passed to the online store customer support to manage purchases and purchase history, and to resolve customer issues.
The name, phone number and e-mail address will be forwarded to the transportation provider of your choice. In the case of goods delivered by courier, the address of the customer shall be provided in addition to the contact details.
If the online store is accounted for by a service provider, personal data will be transferred to the service provider for accounting purposes.
Personal information may be transferred to information technology service providers if this is necessary to ensure the functionality of the web store or data hosting.

Security and data access

Personal data is stored on servers located in the territory of a Member State of the European Union or countries that are members of the European Economic Area. Data may be transferred to countries that have been assessed by the European Commission as having an adequate level of data protection and to US companies that are affiliated with the Privacy Shield framework.
Access to personal information is available to online store staff who can access personal information to resolve technical issues related to the use of the online store and to provide customer support.
The Web Store implements appropriate physical, organizational and IT security measures to protect personal information from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.
The transfer of personal data to authorized processors of the web store (eg transport service provider and data hosting) is subject to agreements with the web store and the authorized processors. Controllers are required to provide appropriate safeguards for the processing of personal data.

Data Enhancement

In our effort to continually be a better, more efficient and more effective company and to help ensure that we are being as relevant to you as we can, we occasionally add other public information about you from other sources to the data we house. To do this may involve sharing some minimal data (generally only name, address and/or phone) for matching purposes.

Access and rectification of personal data

Personal Data can be accessed and corrected in the online store user profile. If the purchase is made without a user account, personal information can be accessed through customer support.

Withdrawal of consent

If the processing of personal data takes place with the consent of the customer, the customer has the right to withdraw the consent by notifying the customer support by e-mail.


Closing an online store customer account will delete personal information unless such data is required to be stored for accounting or consumer dispute resolution purposes.
If a purchase is made without a client account in the online store, the purchase history is retained for three years.
In the case of disputes relating to payments and consumer disputes, personal data shall be retained until the claim has been complied with or until the limitation period has expired.
The personal data necessary for accounting purposes shall be kept for seven years.


Contact customer support via email to delete your personal information. The request for erasure shall be replied to within not more than one month and the period for erasure shall be specified.


Requests for the transfer of personal data sent by e-mail shall be answered within one month at most. Customer Support identifies and informs you of personal data that is subject to transfer.
Direct Marketing Messages The email address and telephone number will be used to send direct marketing communications, subject to customer consent. If the customer does not wish to receive direct marketing notices, either select the appropriate reference in the footer of the email or contact customer support.
If personal data are processed for direct marketing purposes (profiling), the customer is entitled to a profile analysis of both the initial and further processing of their personal data, including direct marketing
object at any time by notifying customer support via email (such information must be clearly and separately from any other information).

Solving arguments

Disputes related to the processing of personal data are resolved through customer support. The supervisory authority is the Estonian Data Protection Inspectorate (