LAAV

Privacy Policy

Last updated: 04.01.26

This Privacy Policy explains how Laavchair OÜ (registration code 17334188), address: Laste tn 6-31, Jüri alevik, Rae vald, Harjumaa 75301, Estonia, email: laav.chair@gmail.com, phone: +372 56566213) processes personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Laavchair OÜ is the data controller responsible for the processing of personal data.
Responsible person: Carmen Hallang.

2. Personal Data We Collect

We collect only personal data necessary to communicate with you, fulfill orders, and comply with legal obligations. This may include:

  • Name
  • Email address
  • Phone number
  • Delivery and billing address
  • Order details (product type, invoice number, date, amount)
  • Payment-related references (we do not store full card or banking details)
  • Information voluntarily provided via contact forms or email (messages, feedback, images)

Providing personal data is voluntary; however, failure to provide required information may prevent order fulfillment.

3. Legal Basis for Processing

Personal data is processed based on:

  • Performance of a contract (order processing, delivery, invoicing)
  • Legal obligation (accounting and tax requirements)
  • Legitimate interest (customer communication and business administration)
  • Consent, where applicable (marketing communication)

4. Purpose of Processing

Personal data is used solely for:

  • Processing and delivering orders
  • Issuing invoices and managing payments
  • Communicating regarding orders or inquiries
  • Complying with legal and accounting obligations
  • Improving customer service and internal operations
  • Sending marketing or product updates only with explicit consent

We do not use automated decision-making or profiling.

5. Data Retention

  • Accounting and financial data: up to 7 years, as required by law
  • Order-related and communication data: up to 2 years after last contact
  • Consent-based data: until consent is withdrawn

After the retention period, data is securely deleted or anonymized.

6. Data Sharing

We do not sell or trade personal data.

Data may be shared only when legally required or necessary, such as with:

  • Accounting service providers
  • Tax or regulatory authorities

All processors are required to comply with GDPR.

7. Data Security

Appropriate technical and organizational measures are applied to protect personal data.
Access is limited to the owner of Laavchair OÜ only.
No internet transmission can be guaranteed to be fully secure.

8. Your Rights

You have the right to:

  • Access your personal data
  • Request correction or deletion (where legally permitted)
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the Estonian Data Protection Inspectorate

Requests can be sent to laav.chair@gmail.com.

9. Data Transfers

Personal data is not transferred outside the EU/EEA.

10. Cookies

Our website uses cookies. For details, please see our Cookie Policy.

11. Changes

We may update this Privacy Policy when required. The latest version will always be available on our website.