Privacy Policy

We take personal data seriously and process it only to the extent necessary for the operation of the website, communication with customers, organization of services, and compliance with legal requirements.

1. Who is responsible for processing data

The controller responsible for processing personal data is:
Brand and website: Alkotakso Tallinn
Website: alkotaksotallinn.ee

2. What data we may process

Depending on how you use the website or contact us, we may process the following data:

  • name;

  • phone number;

  • email address;

  • delivery address or location;

  • information you provide yourself when contacting us or placing an order;

  • information about selected products and the order;

  • communication history, if necessary for processing an inquiry or order;

  • IP address;

  • device type, browser, and operating system;

  • date and time of website visits;

  • pages viewed;

  • technical website logs;

  • settings and information regarding consent to the use of cookies.

We do not request or store bank card details on the website.
We also do not request special categories of personal data, such as information about health, political views, religious beliefs, or other similar data.

3. How personal data is used

Personal data may be used for the following purposes:

Processing inquiries and orders

Contact details and information provided by the customer are used to respond to inquiries, clarify order details, arrange delivery, and perform related actions.
The legal basis is the necessity to take steps at the customer’s request and to perform contractual obligations.

Communication with the customer

We may use the contact details you provide to contact you regarding a specific inquiry, order, or delivery.
We do not use contact details for mass advertising communications without an appropriate legal basis or consent.

Compliance with legal requirements

Certain information may be processed and retained where necessary to comply with accounting, tax, and other legal obligations.

Website security

Technical data may be used to ensure the stable and secure operation of the website, detect technical errors, abuse, fraudulent activity, and attempts at unauthorized access.
The basis for such processing is our legitimate interest in ensuring the security of the website and the services provided.

Analytics and optional cookies

Analytics, advertising, and other optional technologies are used only in accordance with the user’s consent settings.
Where consent is required for their use, such technologies are activated only after consent has been given.
Users may change their choices through the cookie settings on the website.

4. Cookies

The website uses cookies that are necessary for its normal operation and may also use functional, analytical, statistical, and advertising cookies.
Necessary cookies may be used without separate consent because certain website functions cannot operate properly without them.
For optional cookies, consent is requested through the relevant banner on the website.
In the cookie settings, the user can:

  • allow all categories;

  • reject optional cookies;

  • select individual categories;

  • change a previously made choice.

Information about specific cookies and their purposes is available in the cookie settings window on the website.

5. Age verification

The website and services related to alcoholic products are intended for adults.
When alcoholic beverages are handed over, confirmation of the recipient’s age may be required in accordance with Estonian law.
An identity document may be requested for age verification.
If the document is used solely to verify age, no copy is retained and the data contained in it is not recorded unless such processing is required by law.

6. Who personal data may be shared with

We do not sell personal data to third parties.
To the extent necessary for the operation of the website and the provision of services, data may be accessible to:

  • the hosting provider;

  • specialists responsible for technical maintenance of the website;

  • providers of communication tools and messaging services;

  • providers of analytics or advertising services — only where their use has been authorized by the user;

  • accounting, legal, and other professional service providers, where the transfer of data is necessary;

  • partners involved in fulfilling the order or delivery, where necessary for providing the service;

  • public authorities, where disclosure of data is required by law.

Such parties receive only the amount of data necessary to perform the relevant task.

7. Transfers of data outside the European Economic Area

Some third-party services used by the website may process data outside the European Economic Area.
Where such transfers take place, they are carried out only where data protection safeguards required by law are in place, such as an adequacy decision by the European Commission or appropriate contractual safeguards.
The use of optional third-party services requiring user consent depends on the cookie settings selected by the user.

8. Data retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected.
The following retention periods generally apply:

  • inquiries that do not result in an order or further contractual relationship — up to 12 months after the end of communication;

  • information necessary for fulfilling an order and protecting against potential contractual claims — up to 3 years after the end of the relevant relationship, unless a longer period is required by law;

  • accounting and related documents — for the period established by Estonian law, generally 7 years;

  • technical data and website logs — only for the period necessary to ensure the security and proper operation of the website;

  • cookie information — in accordance with the lifetime of the relevant cookie or until the user withdraws consent.

If data is necessary for resolving a dispute, complying with a legal obligation, or protecting legal claims, it may be retained until the relevant period has expired.

9. Your rights

Under data protection law, you have the right to:

  • find out whether we process your personal data;

  • access your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of data where there is no legal basis for its continued retention;

  • request restriction of data processing;

  • object to processing carried out on the basis of legitimate interests;

  • receive your data in a portable format where provided for by law;

  • withdraw previously given consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Before providing data, we may ask the applicant to confirm their identity where necessary to prevent personal data from being disclosed to an unauthorized person.

10. Complaints

If you believe that your personal data is being processed unlawfully, you may contact us first so that we can look into the matter.

You also have the right to contact the Estonian supervisory authority:

Andmekaitse Inspektsioon — Estonian Data Protection Inspectorate
Tatari 39
10134 Tallinn
Estonia
www.aki.ee

11. Data security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.
Access to personal data is granted only to persons who need it to perform their relevant duties.
When using third-party service providers, we aim to choose services that provide an appropriate level of data protection.

12. Automated decision-making

Alkotakso Tallinn does not make decisions concerning customers that produce legal or similarly significant effects solely on the basis of automated processing of personal data.
Third-party analytics or advertising services may use their own automated technologies in accordance with their terms and privacy policies where the user has consented to the use of the relevant technologies.

13. Links to third-party websites and services

The website may contain links to third-party websites, social networks, messaging services, or other services.
After following a link to a third-party resource, the processing of personal data is governed by the rules of the relevant provider. Alkotakso Tallinn does not control data processing on third-party websites.

14. Changes to the Privacy Policy

We may update this Privacy Policy if the operation of the website, the services used, or legal requirements change.
The current version is always published on alkotaksotallinn.ee.

Scroll to Top