This Privacy Policy describes how Aprvh OÜ (Vintage Vaibad) collects, uses and protects the personal data of visitors and customers of the website vintagevaibad.ee.

It is important to us that your personal data is protected and that it is processed transparently and in accordance with applicable laws and regulations.

1. Data Controller

The data controller responsible for the processing of personal data is:

Aprvh OÜ
Registry code: 16600920
Vooru tee 13
Kaagvere küla, Kastre vald
62317 Tartumaa
Estonia

E-mail: info@vintagevaibad.ee

If you have any questions regarding the processing of personal data, you can contact us at: info@vintagevaibad.ee

2. What Personal Data Do We Collect?

Depending on how you use the website and our services, we may process the following personal data:

• first and last name;
• e-mail address;
• telephone number;
• billing and delivery address; 
• information about ordered products and services;
• order amount and payment-related information;
• selected delivery method and delivery-related information;
• correspondence with us and enquiries submitted to us;
• information and photographs submitted in connection with services, such as carpet cleaning or repair;
• technical data related to the use of the website, such as IP address, browser and device information;
• data collected through cookies in accordance with your cookie preferences.

We do not collect or process more personal data than is necessary for the specific purpose.

3. How Do We Use Personal Data?

Processing Orders

We use your personal data to:

• receive and process orders;
• process purchases and payments;
• arrange delivery of products;
• contact you when necessary regarding your order;
• manage product returns, complaints and other matters related to your order.

The legal basis for such processing is the performance of a contract with you or taking steps at your request prior to entering into a contract.

Providing Services and Responding to Enquiries

If you contact us regarding carpet cleaning, repair, finding a suitable carpet or any other matter, we use the information you provide to respond to your enquiry and provide the requested service.

If you send us photographs of a carpet, we use them to assess your enquiry and provide the service.

Depending on the nature of the enquiry, the legal basis for processing is taking steps at your request prior to entering into a contract or our legitimate interest in providing quality customer service.

Accounting and Legal Obligations

We process order and payment-related data to the extent necessary to fulfil accounting, tax and other legal obligations.

The legal basis for such processing is compliance with legal obligations applicable to us.

Website Security and Operation

We may process technical data to ensure the reliability and security of the website, prevent misuse and identify technical problems.

The legal basis for such processing is our legitimate interest in ensuring the secure and proper operation of the website.

Turundus

If you subscribe to our newsletter in the future or otherwise provide your consent to receive marketing communications, we will use your contact details to send you such communications.

The legal basis for sending marketing communications is your consent. You may withdraw your consent at any time.

4. Payment Processing

For processing payments made in our online store, we use the payment service provider Maksekeskus AS.

When making a payment, the data necessary for processing the payment is transferred to the payment service provider. The payment service provider processes personal data in accordance with its own privacy policy and applicable laws and regulations.

Vintage Vaibad does not process or store your complete bank card details or internet banking authentication information.

5. Disclosure of Personal Data

We may disclose personal data to third parties only to the extent necessary to fulfil an order or provide a service, operate the website or comply with legal obligations.

Data may be disclosed, for example, to:

• Maksekeskus AS for payment processing;
• transport or parcel locker service providers responsible for delivering goods;
• web hosting and IT service providers;
• accounting service providers;
• other service providers whose services we use to operate the website and online store;
• government authorities or other persons where disclosure of the data is required by law.

Only the data necessary for providing the specific service is disclosed to service providers.

We do not sell or disclose your personal data to third parties for their own independent marketing activities.

6. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with a legal obligation.

Order and accounting-related data is generally retained for 7 years from the end of the relevant financial year, in accordance with legal requirements.

Enquiry and customer communication datathat is not related to accounting documents is generally retained for up to 2 years after the last substantive communication, unless a longer retention period is necessary to establish, exercise or defend a legal claim.

Data processed for marketing purposes is retained until consent is withdrawn or you unsubscribe from the marketing list.

When personal data is no longer necessary for the purpose for which it was collected and there is no legal basis for further retention, the data will be deleted or anonymised.

7. Cookies

The website may use cookies to ensure the proper functioning and usability of the website and online store.

Necessary Cookies

Necessary cookies enable the use of the website and online store's basic functions, such as the shopping cart, checkout process and security-related functions.

Separate consent is not required for the use of these cookies, as the website may not function properly without them.

Other Cookies

If the website uses analytical, functional or marketing cookies that are not strictly necessary for the operation of the website, they will only be used in accordance with the consent you have provided.

You can change your cookie preferences through the cookie management solution available on the website.

You can also delete or block cookies through your browser settings. Blocking cookies may affect the functionality of certain parts of the website.

8. Security of Personal Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss and misuse.

Access to personal data is limited to those persons and service providers who need access to perform their duties or provide the relevant service.

9. Your Rights

You have the right to:

• receive information about which of your personal data we process;
• request access to your personal data;
• request the correction of inaccurate or incomplete data;
• request the deletion of your personal data in certain circumstances;
• request the restriction of processing of your personal data in certain circumstances;
• object to the processing of your personal data where the processing is based on legitimate interests;
• in certain circumstances, receive the personal data you have provided to us in a structured and machine-readable format and transmit it to another data controller;
• withdraw your consent at any time where the processing of your data is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

To exercise your rights, please contact us at: info@vintagevaibad.ee

Where necessary, we may request additional information to verify your identity before processing your request.

10. Right to Lodge a Complaint

If you believe that your rights have been violated in the processing of your personal data, we ask that you first contact us at: info@vintagevaibad.ee

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or take the matter to court.

11. Changes to This Privacy Policy

We may update this Privacy Policy when necessary, for example, if our services, the solutions used on the website or legal requirements change.

The current version of this Privacy Policy is always published on the website vintagevaibad.ee.

Last updated: 29 September 2026