Privacy Policy
Effective date: May 2025
Last updated: May 2025
1. Data Controller
STTD OÜ
Registration code: 12447025
Email: info@minurattad.ee
Website: www.minurattad.ee
For questions regarding personal data: info@minurattad.ee
2. What Data We Collect
We collect the following personal data:
- Name or username — to publish a listing and communicate with buyers
- Email address — for account management and notifications
- Phone number — for buyer-seller contact
- Listing content — product description, photos, price, technical details
- IP address and device info — for security and fraud prevention
- Transaction data — purchase confirmation (full payment data not stored)
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Account creation and management | Contract — Art. 6(1)(b) |
| Publishing a listing | Contract — Art. 6(1)(b) |
| Buyer-seller communication | Contract — Art. 6(1)(b) |
| Order and delivery processing | Contract — Art. 6(1)(b) |
| Fraud prevention and security | Legitimate interest — Art. 6(1)(f) |
| Accounting and tax compliance | Legal obligation — Art. 6(1)(c) |
| Newsletter (consent only) | Consent — Art. 6(1)(a) |
4. Retention Periods
- Account data: active period + 12 months after deletion
- Listing data: active period + 12 months after removal
- Transaction data: 7 years (accounting law requirement)
- Marketing consent: until consent is withdrawn
- Technical logs: up to 90 days
5. Data Sharing
Data is not sold or shared with third parties, except:
- Payment provider — transaction processing only
- Delivery company — name, address, phone for shipping
- IT service providers — platform maintenance (under data processing agreement)
- Public authorities — upon lawful request or court order
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Delete your data ("right to be forgotten")
- Restrict processing in certain cases
- Data portability — receive your data in machine-readable format
- Object to processing based on legitimate interest
- Withdraw consent for marketing at any time
Send requests to: info@minurattad.ee — we respond within 30 working days.
To file a complaint: Estonian Data Protection Inspectorate | www.aki.ee
7. Security
We protect your data using HTTPS encryption, restricted access controls, regular security updates, and database encryption.
8. Cookies
| Type | Purpose | Consent required |
|---|---|---|
| Functional | Session management, language | No |
| Analytical | Usage statistics (Google Analytics) | Yes |
| Marketing | Retargeting (Google Ads) | Yes |
9. Policy Updates
We reserve the right to update this policy. For significant changes, we will notify you by email at least 14 days in advance. Current version always available at minurattad.ee/faq/policy