PRIVACY POLICY OF OÜ GLASUR GRUPP FOR VISITORS, CUSTOMERS AND BUSINESS PARTNERS
Data Controller: OÜ Glasur Grupp, registration number 10255250, VAT number: EE100011559, registered address: Punane tn 56, Lasnamäe district, Tallinn, Harju County, 13619 (hereinafter referred to as the “Company”, “We”, “Us”).
Email address for data protection inquiries: info@glasurgrupp.ee.
This Privacy Policy provides information about the processing of personal data by the Company and informs you about what personal data may be processed, as well as your rights in relation to our processing activities. We process your personal data in accordance with applicable legislation, including the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”).
The Company regularly reviews data protection matters. Therefore, if the circumstances of personal data processing change, this Privacy Policy may be updated, amended, or supplemented to reflect the actual processing activities carried out. The latest version of this Privacy Policy is published on this website.
1. For what purposes, on what legal basis, and what personal data do we process?
Order processing and fulfillment. To process and fulfill your orders, we process the following data: the customer’s or customer’s contact person’s first and last name, telephone number, email address, delivery address, and order history. Such personal data is collected and processed pursuant to Article 6(1)(b) of the GDPR, i.e., for the performance of a contract.
Video surveillance. To protect property, the life and health of individuals, and to facilitate the detection and investigation of criminal offences, video surveillance is carried out on our premises. Within the scope of video surveillance, we collect personal data contained in video recordings, including the individual’s image, video recording, date, and time of the recording. Audio is not recorded. The legal basis for this processing is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in protecting property and individuals and in investigating criminal offences committed on our premises.
Marketing. In order to inform you about our special offers, news, promotions, and other events, we may send you marketing communications. Such communications are sent based on your consent in accordance with Article 6(1)(a) of the GDPR.
2. Recipients of Personal Data
Your personal data collected for order processing and fulfillment, marketing communications, and video surveillance is accessible to our employees and authorized persons who require such data to perform their job duties.
Your personal data may also be disclosed to couriers and other service providers involved in fulfilling and delivering your order, law enforcement authorities and courts for the prevention, detection, or investigation of criminal offences, state and local government authorities where required by law, as well as legal advisors.
Personal data is processed exclusively within the territory of the European Union / European Economic Area and is not transferred outside the EU/EEA.
3. Personal Data Retention Period
Your personal data is retained for as long as necessary to achieve the purposes for which it was collected and in accordance with applicable legal requirements. Personal data may be retained for a longer period where continued processing is necessary for ongoing legal proceedings.
Data related to the conclusion and performance of customer contracts – accounting documents are retained for 5 years, while customer contracts are retained for 3 years after the termination of the contract.
Data related to marketing communications is retained until you withdraw your consent.
Video recordings are retained for 30 days or, where a criminal offence has been identified, until the conclusion of the relevant investigation and legal proceedings.
4. Your Rights Regarding Personal Data Processing
You have the following rights concerning the protection of your personal data:
- Right of access
To exercise your right of access, please specify the relevant time period and the personal data you wish to receive. You have the right to request information about what personal data we process, why we process it, how we obtained it, to whom it has been disclosed, how long it will be retained, and to receive a copy of your personal data. Your request can be processed more efficiently if you specify a limited time period and describe your request in as much detail as possible. It is also helpful if you explain the purpose for which you require access to your personal data.
- Right to rectification
If you need to correct or update your personal data held by us, please clearly indicate which data should be corrected and provide the updated information. If the data was not obtained directly from you, please explain why you believe the information is inaccurate to facilitate an appropriate assessment.
- Right to erasure
If you wish us to erase your personal data, please specify exactly which personal data should be deleted and provide the reasons for your request. Please note that in certain cases we may not be able to erase your data where legal obligations require us to retain it.
- Right to restriction of processing
If you believe that your personal data is not being processed lawfully, you may request that we restrict the processing of specific personal data. Your request should explain why you believe such restriction is necessary.
- Right to object to processing
In certain situations, you have the right to object to the processing of your personal data based on your particular circumstances. Such requests should explain the personal circumstances on which your objection is based.
- Right to data portability
If you wish your personal data to be transferred to another data controller or provided directly to you, please specify which personal data you would like to receive or transfer.
If you wish to exercise any of your rights, please contact us by submitting a written request via email to: info@glasurgrupp.ee. We kindly ask that your request be signed with a qualified electronic signature so that we can verify your identity.
We will review your request without undue delay and respond regarding its acceptance or refusal no later than one month from the date of receipt. Where necessary, we may extend this period by an additional two months, in which case you will be informed of the extension within the initial one-month period.
We reserve the right to refuse your request if:
- it is not clearly formulated;
- we are unable to verify your identity;
- we have already responded to an identical request;
- the requested information is excessive or disproportionate;
- the request is manifestly unfounded (for example, it is unrelated to our Company or lacks sufficient justification);
- applicable legislation prohibits us from disclosing the requested information.
If you have concerns regarding the way we process your personal data, you may submit a complaint to us by emailing: info@glasurgrupp.ee.
If you believe that we have processed your personal data unlawfully, you also have the right to lodge a complaint with the competent data protection supervisory authority regarding the processing carried out by our Company.
Privacy Policy last updated on 23 October 2025.
