Privacy policy

 

The controller of personal data is Kadde Company OÜ (address: Vanapagana 17, Räni village, Kambja parish, Tartu County, registry code: 16349868) (hereinafter also “we”).

Privacy Notice
Explains what personal data we collect about you;
Explains the legal bases and purposes for processing your personal data;
Helps you understand your rights regarding your personal data.

Our role in protecting your privacy

We process personal data in accordance with Estonian and European Union legislation. We use data only for the purposes for which it was collected and only to the extent necessary. Once the purpose has been fulfilled, we delete or anonymize the personal data.

This privacy notice provides information and guidance when you use or visit the Minix Composter website. It does not cover the data processing of other companies’ websites or services.

You can always contact us at info@yarbo.ee.

When and how do we collect your personal data?

Personal data refers to information that can be linked to you as an individual. The scope of processed personal data depends on the specific services you use or the consents you have given. We follow the principle of data minimization, meaning we only collect data necessary to achieve the purpose.

We collect personal data:

Directly from you or automatically when you browse our website;
When registering as a customer or ordering a product or service;
When subscribing to a newsletter;
When communicating via email, phone, or other means;
When giving consent for marketing offers;
When submitting an inquiry or complaint;
Sometimes from other sources, such as public registers, if it is lawful or necessary for contract performance.

What data do we collect and process?

We collect and process the following types of data:

Contact details: name, address, phone number, email address.
Data related to contracts and other documents.
Identification data: IP address, browser type, time zone setting, operating system.
Website usage data: page response times, browsing history, viewed products/services.

What about sensitive data?
We do not collect sensitive data unless you disclose it to us yourself or give explicit consent.

On what legal bases and for what purposes do we process your personal data?

Processing must be justified and lawful, for example:

Marketing activities (based on consent): sending newsletters and offers. Legal basis: consent.
Improvement of products and services: feedback, statistics, analytics. Legal basis: legitimate interest.
Provision of products and services: contract performance. Legal basis: contract performance.
Customer support and communication: handling inquiries and complaints. Legal basis: contract performance.

Legal bases:

Consent: you give clear permission for processing your data for specific purposes.
Legitimate interest: processing is necessary for our legitimate interests, such as improving services or ensuring security.
Contract performance: processing is necessary to fulfill a contract.
Legal obligation: processing required by law.

How long do we retain your personal data?

We retain data for as long as necessary to fulfill the purposes of processing or as required by law.

Customer data – retained for two years after the end of the customer relationship.
Accounting data – retained for seven years.

Where is personal data processed and how is it protected?

We store and process data in Estonia, the European Union, or the European Economic Area. In certain cases, processing may also take place outside these regions.

Always consider carefully before sharing your personal data with anyone, ensuring you understand how it will be used and protected. If you suspect a breach, please inform us immediately.

Third parties who may process your personal data

We use third parties to help facilitate our operations and provide better services. The main third parties are:

Analytics – Google Analytics
Marketing – Facebook
Newsletters – ConvertKit

What are your rights regarding your personal data and how can you exercise them?

Right of access: you can request information about your personal data at any time.
Right to rectification or erasure: you can request correction or deletion of inaccurate data.
Right to object: you can object to processing based on legitimate interest.
Right to data portability: you can receive your data in a machine-readable format.
Right to lodge a complaint: you can contact the Data Protection Inspectorate or a court if you have concerns or complaints.