Privacy Policy

1. General Provisions

  1. This Privacy Policy governs the principles of collecting, processing, and storing personal data. Personal data is collected, processed, and stored by the data controller Kõnekindlus OÜ (hereinafter referred to as the Data Controller), who also transmits the personal data necessary for payment processing to the authorized processor Montonio Finance UAB.
  2. A Data Subject within the meaning of this Privacy Policy is a Client or any other natural person whose personal data is processed by the Data Controller.
  3. A Client within the meaning of this Privacy Policy is anyone who purchases goods or services from the Data Controller’s website.
  4. The Data Controller follows the principles of data processing established by law and ensures that personal data is processed lawfully, fairly, and securely. The Data Controller can confirm that personal data is processed in accordance with applicable legislation.

2. Collection, Processing, and Storage of Personal Data

2.1. Personal data collected, processed, and stored by the Data Controller is obtained electronically, primarily through the website and by e-mail.

2.2. By sharing their personal data, the Data Subject grants the Data Controller the right to collect, organize, use, and manage personal data for the purposes defined in this Privacy Policy, whether directly or indirectly, when purchasing goods or services through the website.

2.3. The Data Subject is responsible for ensuring that the information provided is accurate, correct, and complete. Knowingly providing false information is considered a violation of this Privacy Policy. The Data Subject must promptly notify the Data Controller of any changes to the provided information.

2.4. The Data Controller shall not be held liable for any damage caused to the Data Subject or third parties resulting from incorrect or false information provided by the Data Subject.

3. Processing of Clients’ Personal Data

3.1. The Data Controller may process the following personal data of the Data Subject: first and last name, phone number, e-mail address, delivery address, bank account number, and for legal entities, the company name and registration number.

3.2. In addition to the above, the Data Controller has the right to collect data about the Client that is publicly available in official registers.

3.3. The legal bases for processing personal data are Article 6 (1) (a), (b), (c), and (f) of the General Data Protection Regulation (GDPR):

a) the Data Subject has given consent to the processing of their personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the Data Subject is a party, or in order to take steps at the request of the Data Subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
f) processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject, particularly when the Data Subject is a child.

3.4. The Data Controller has the right to share Clients’ personal data with third parties, such as authorized data processors, accountants, transport and courier service providers, and payment service providers. The Data Controller remains the responsible processor of the data. Personal data necessary for payment processing is transmitted to the authorized processor Montonio Finance UAB.

3.5. When processing and storing personal data, the Data Controller applies organizational and technical measures that ensure protection of personal data against accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing.

3.6. To provide a better shopping experience, the website uses cookies. Clients have the right to refuse the storage of cookies on their device.

4. Rights of the Data Subject

4.1. The Data Subject has the right to access and review their personal data.

4.2. The Data Subject has the right to obtain information regarding the processing of their personal data.

4.3. The Data Subject has the right to correct or supplement inaccurate data.

4.4. To exercise these rights, the Data Subject may contact customer support via e-mail at info@lengu.eu.

5. Final Provisions

5.1. These data protection conditions are prepared in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR), the Personal Data Protection Act of the Republic of Estonia, and other applicable EU and Estonian legislation.

5.2. The Data Controller reserves the right to amend these data protection conditions partially or fully by notifying Data Subjects of such changes through the website lengu.eu.