Privacy policy

1. General provisions

1.1 These privacy terms describe how Minevik OÜ (registry code 14730647, hereinafter the data controller) collects, uses, stores, and protects personal data on the website www.yrp.ee.

1.2. A data subject is any natural person whose personal data is processed by the data controller, including customers, individuals submitting inquiries, or website visitors.

1.3. A customer is a person who purchases goods or services via the website www.yrp.ee.

1.4. The data controller processes personal data in accordance with the General Data Protection Regulation (GDPR), the Estonian Personal Data Protection Act, and other applicable legislation.

2. Collection and use of personal data

2.1. Personal data is primarily collected electronically through online store orders, contact forms, and email.

2.2. Based on the data provided by the data subject, the data controller has the right to collect, use, and manage personal data for the purposes defined in these terms.

2.3. The data subject is responsible for the accuracy of the data provided and is obliged to inform the data controller of any changes.

2.4. The data controller is not liable for any damage resulting from incorrect or incomplete data.

3. Personal data processed

3.1. The personal data processed may include the following:

first and last name
phone number
email address
delivery address
bank account details
payment-related information (e.g. payment reference or payment method; card details are not stored)

3.2. The data controller may also process data available from public sources (e.g. business register).

4. Legal basis for processing personal data

4.1. The processing of personal data is based on Article 6(1) of the GDPR, including:

a) consent of the data subject
b) performance of a contract or pre-contractual measures
c) compliance with a legal obligation (e.g. accounting)
f) legitimate interest of the data controller (e.g. web analytics or customer communication)

5. Purposes of processing and retention periods

Order fulfilment – up to 24 months
Ensuring the functioning of the online store – up to 24 months
Customer communication and management – up to 24 months
Accounting and tax purposes – as required by law (7 years)
Marketing (e.g. newsletters, advertisements) – up to 5 years or until consent is withdrawn

6. Sharing of personal data

6.1. The data controller may share personal data with partners, such as:

• courier and transport service providers (e.g. Smartposti OÜ, AS Eesti Post, DPD Eesti AS, Unisend Eesti OÜ)
• payment service provider Montonio Finance UAB
• web hosting provider Elkdata OÜ (Veebimajutus.ee), whose servers host the website and databases
• marketing and analytics service providers (e.g. Google LLC – Google Analytics, Meta Platforms Inc. – Facebook Pixel)

6.2. All third parties process data in accordance with applicable data protection requirements.

7. Data protection and security

7.1. The data controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or destruction.

7.2. Personal data is retained only for as long as necessary to fulfil the purpose of collection or to comply with legal obligations.

8. Rights of the data subject

Under the GDPR, the data subject has the following rights:

the right to access their data
the right to rectification
the right to erasure (“right to be forgotten”)
the right to restriction of processing
the right to data portability
the right to object
the right to withdraw consent at any time
the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee)

To exercise these rights, please contact: info@yrp.ee

9. Cookies and tracking technologies

9.1. The website uses cookies to ensure the technical functionality of the site, analyse traffic (Google Analytics), and display targeted advertisements (Facebook Pixel).

9.2. Categories of cookies used:

necessary cookies – ensure basic site functionality
statistical cookies – collect anonymous information about site usage
marketing cookies – help provide relevant advertising content

9.3. Cookies are managed via the Complianz cookie manager. Users can give or refuse consent according to their preferences.

10. Refusing cookies

10.1. The use of cookies is agreed upon during the first visit to the website or by closing the relevant notification.

10.2. Users can restrict or delete cookies in their browser settings. Please note that disabling all cookies may affect the functionality of the website.

11. Changes to the privacy policy

11.1. Minevik OÜ reserves the right to amend these privacy terms in accordance with changes in legislation or the development of business activities.

11.2. Updated terms will be published on the website www.yrp.ee and will enter into force upon publication.

12. Contact details

Data controller:
Minevik OÜ
Email: info@yrp.ee
Website: www.yrp.ee