Privacy Policy


The personal data controller of the online shop www.elytra.ee is Elytra Trade OÜ (registration code 14973858), e-mail info@elytracollection.com.

What personal data is processed

- name, telephone number and e-mail address;
- delivery address;
- bank account number;
- the cost of goods and services and details of payments (purchase history);
- customer support details.

Purposes for which personal data is processed

Personal data is used for the management of customer orders and the delivery of goods. Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of goods and services purchased and to analyse customer preferences. The bank account number is used to return payments to the customer.
Personal data, such as e-mail, telephone number, customer name, are processed in order to resolve issues related to the provision of goods and services (customer support).
A web shop user's IP address or other network identifiers will be processed by the web shop as
for the provision of information society services and web usage statistics.

Legal basis

The processing of personal data is carried out for the purpose of the performance of a contract with a customer.
The processing of personal data is carried out for the fulfilment of a legal obligation (e.g. accounting and consumer dispute resolution).

Recipients to whom personal data are disclosed

Personal data will be transferred to the online shop's customer support for the purposes of managing purchases and purchase history.
kliendiprobleemide lahendamiseks.  Nimi, telefoninumber ja e-posti aadress edastatakse kliendi poolt valitud transporditeenuse pakkujale. Kui tegemist on kulleriga kohale toimetatava kaubaga, siis edastatakse lisaks kontaktandmetele ka kliendi aadress. Isikuandmeid võidakse edastada infotehnoloogia teenuste pakkujatele, kui see on vajalik veebipoe funktsionaalsuse või andmemajutuse tagamiseks. Elytra Trade OÜ on isikuandmete vastutav töötleja, Elytra Trade OÜ edastab maksete teostamiseks vajalikud isikuandmed volitatud töötleja Maksekeskus AS-le

Security and data access

Personal data is stored on webimajutus.ee servers located in the territory of a Member State of the European Union or in the territory of countries that are members of the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to companies in the United States that have signed up to the Privacy Shield framework. Access to personal data is granted to the employees of the online shop who can access personal data in order to resolve technical issues related to the use of the online shop and to provide customer support services. The online shop implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure. Transfers of personal data to the online shop's processors (e.g. transport service providers and data aggregators) are subject to agreements between the online shop and the processors. The processors are obliged to ensure appropriate safeguards when processing personal data. Translated with www.DeepL.com/Translator (free version)

Accessing and correcting personal data

Personal data can be accessed and corrected in the online shop's user profile. If the purchase has been made without a user account, the personal data can be accessed via the login.

Withdrawal of consent

If the processing of personal data is carried out on the basis of the customer's consent, the customer has the right to withdraw the consent by informing Customer Support by e-mail.


Personal data will be deleted upon closure of the online shop's customer account, unless such data need to be stored for accounting purposes or to resolve consumer disputes.
If a purchase is made in an online shop without a customer account, the purchase history is kept for three years. In the case of disputes relating to payments and consumer disputes, personal data will be kept until the claim is settled or the limitation period expires. Personal data necessary for accounting purposes will be kept for seven years.

Removal from the

In order to delete personal data, you must contact customer support by e-mail. A reply to the erasure request will be sent within one month at the latest, specifying the period of erasure.

Transfer to

Requests for the transfer of personal data made by e-mail will be answered within one month at the latest. Customer Support will verify the identity and notify the personal data to be transferred.

Direct marketing communications

The email address and telephone number will be used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing communications, he/she should select the appropriate reference in the footer of the e-mail or contact customer support. Where personal data are processed for the purposes of direct marketing (profiling), the customer has the right to object at any time to both the initial and further processing of his/her personal data, including profiling in relation to direct marketing, by informing customer support by e-mail to info@elytracollection.com. Translated with www.DeepL.com/Translator (free version)

Dispute resolution

Disputes relating to the processing of personal data will be resolved through customer support
info@elytracollection.com . The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).

en_GBEnglish (UK)