Privacy Policy
Privacy policy for Minurattad.ee: what data we collect, why we process it, cookies and your rights under GDPR.
- Effective date:
- May 2025
- Last updated:
- May 2025
1. Data Controller
- Data controller
- minurattad.ee OÜ
- Registry code
- 17599403
- info@minurattad.ee
- Website
- www.minurattad.ee
For questions regarding personal data: info@minurattad.ee
2. What Data We Collect
We collect the following personal data:
- Name or username — to publish a listing and communicate with buyers
- Email address — for account management and notifications
- Phone number — for buyer-seller contact
- Listing content — product description, photos, price, technical details
- IP address and device info — for security and fraud prevention
- Transaction data — purchase confirmation (full payment data not stored)
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Account creation and management | Contract — Art. 6(1)(b) |
| Publishing a listing | Contract — Art. 6(1)(b) |
| Buyer-seller communication | Contract — Art. 6(1)(b) |
| Order and delivery processing | Contract — Art. 6(1)(b) |
| Fraud prevention and security | Legitimate interest — Art. 6(1)(f) |
| Accounting and tax compliance | Legal obligation — Art. 6(1)(c) |
| Newsletter (consent only) | Consent — Art. 6(1)(a) |
4. Retention Periods
- Account data: active period + 12 months after deletion
- Listing data: active period + 12 months after removal
- Transaction data: 7 years (accounting law requirement)
- Marketing consent: until consent is withdrawn
- Technical logs: up to 90 days
5. Data Sharing
Data is not sold or shared with third parties, except:
- Payment provider — transaction processing only
- Delivery company — name, address, phone for shipping
- IT service providers — platform maintenance (under data processing agreement)
- Public authorities — upon lawful request or court order
6. Your Rights
You have the right to:
- Accessyour personal data
- Correctinaccurate or incomplete data
- Deleteyour data ("right to be forgotten")
- Restrictprocessing in certain cases
- Data portability— receive your data in machine-readable format
- Objectto processing based on legitimate interest
- Withdraw consentfor marketing at any time
Send requests to: info@minurattad.ee — we respond within 30 working days.
To file a complaint: Estonian Data Protection Inspectorate | www.aki.ee
7. Security
We protect your data using HTTPS encryption, restricted access controls, regular security updates, and database encryption.
8. Cookies
| Type | Purpose | Consent required |
|---|---|---|
| Functional | Session management, language | No |
| Analytical | Usage statistics (Google Analytics) | Yes |
| Marketing | Retargeting (Google Ads) | Yes |
9. Policy Updates
We reserve the right to update this policy. For significant changes, we will notify you by email at least 14 days in advance. Current version always available at minurattad.ee/faq/policy