Privacy policy

1. Registrar / Herkut24 OÜ reg.16547551 Rangu 10 Tallinn 13522 Estonia

2. Entity responsible for the register support,

3. Name of the registry customer, marketing, and newsletter registry.

4. Legal basis and purpose of personal data processing

The legal basis under the General Data Protection Regulation of the European Union is your consent to the processing of personal data or a customer relationship between us.

The purpose of the processing of personal data is to communicate with customers, maintain customer relations and marketing.

5. Content of the registry

The data stored in the registry are name, contact details (phone number, email address, postal address), IP address of the network connection, information about the products ordered and any changes to them, billing information, other information related to the customer relationship and the products ordered.

6. Regular sources of information

The data stored in the registry are obtained from the customer, e.g., from messages sent through the online shop, by email, telephone, social media services, contracts, customer meetings and other situations where the customer discloses their data.

7. Regular data transfers and data transfers outside the EU or EEA

Information is not regularly disclosed to other parties. Information may be disclosed to transport companies in connection with the processing of orders.

The data controller may also transfer data outside the EU or EEA.

8. Principles of registry protection

Care is taken when processing data in the registry, and data processed using information systems are properly protected. All systems can only be accessed by persons who have been authorised to use them, with their own user IDs. The registrar shall ensure that the data stored, as well as server access rights and other data relevant to the security of personal data, are treated confidentially and only by those employees whose job description so provides.

9. Right of access and right to request the amendment of data

You can request a review and amendment of your data in writing by sending an email to

10. Other rights relating to the processing of personal data

A person on the registry has the right to request the removal of personal data concerning them from the registry ("right to be forgotten"). Registered data subjects also have other rights under
the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain situations. Requests must be sent to the data controller in writing. If necessary, the registrar may ask the applicant to prove their identity. The data controller will respond to the customer within the timeframe set out in the EU Data Protection Regulation (usually within one month).

To Top