Privaatsuspoliitika
This Privacy Policy explains how MTU Harrastajate Hokiliiga (“HHL Eesti”, “we”) processes personal data of website visitors and online shop customers.
Controller
The controller is MTU Harrastajate Hokiliiga, Mustamae tee 130, Tallinn, Estonia. For privacy and website matters, contact us at harrastajatehokiliiga@gmail.com. For shop-related questions, you may also contact shop@hhl.ee.
Data We Process
- Contact details: name, email address, phone number and message content.
- Order data: billing and shipping address, purchased products, payment method, order amount and order status.
- Technical data: IP address, device and browser data, language selection, cookie identifiers and security logs.
- Newsletter data: email address and consent information if the user subscribes to updates.
Purposes and Legal Bases
- Processing orders, payments and delivery: performance of a contract or pre-contractual steps.
- Responding to enquiries: contract performance, consent or legitimate interest.
- Accounting and legal compliance: legal obligation.
- Website security, troubleshooting and fraud prevention: legitimate interest.
- Newsletters, analytics cookies and marketing cookies: user consent.
Recipients and Processors
Where necessary, we share data with service providers who help operate the website and online shop: hosting and technical maintenance providers, payment providers, delivery partners, email/SMTP services, accounting services, and analytics or marketing services if they are used and the user has given the required consent.
DigitalHELP acts as a technical development, maintenance and support provider for the HHL Eesti website and may therefore have limited access to the WordPress admin area, contact form submissions, shop orders and technical logs. DigitalHELP processes such data on HHL Eesti’s instructions and only for website operation, security, troubleshooting and support.
Retention
We retain data for as long as necessary for the purposes described above or to comply with legal obligations. Order and accounting data are retained for the period required by law. Contact enquiries are generally retained for up to 12 months after communication ends, unless longer retention is necessary to resolve a claim. Newsletter data are retained until consent is withdrawn.
Your Rights
You have the right to request access to your personal data, correction or deletion of data, restriction of processing, object to processing, data portability and withdrawal of consent where processing is based on consent. Requests can be sent to harrastajatehokiliiga@gmail.com.
If you believe your data is processed unlawfully, you have the right to contact the Estonian Data Protection Inspectorate.
