Privacy Policy

Data controller

Stels 88 OÜ
Registry code: 14013526
VAT number: EE101861575
Linnamäe tee 91, 13911 Tallinn, Estonia
Email: info@stels.ee

Data we collect

When a booking is made, we collect only the customer's name, telephone number and essential booking details such as the selected shop, service, date and time. The system may also store the minimum technical data required for its secure operation.

We do not collect additional information to build customer profiles or target advertising.

Purposes of processing

We use the data to create, confirm, change or cancel a booking, communicate with the customer, send reminders, provide the selected service, respond to enquiries, protect legal claims and comply with legal obligations.

If the customer does not provide the data required for a booking, we may be unable to create or confirm it.

Legal bases

Data necessary to arrange a booking and provide the service is processed to perform a contract and take steps at the customer's request before entering into a contract under Article 6(1)(b) GDPR.

Where necessary, we also process data to comply with a legal obligation or on the basis of our legitimate interests, such as system security and the protection of legal claims. Data is used for marketing only with separate, freely given consent, which may be withdrawn at any time.

How we do not use data

We do not sell personal data, share it with advertising companies, build advertising profiles, publish information supplied by customers or provide data to other organisations for their own purposes.

Booking data is not used for marketing messages without the customer's separate consent.

Storage and technical access

Booking data is stored in a protected database. Stels 88 OÜ has no separate administration panel for browsing customer profiles or using the information for other purposes. Database records are not browsed or used for marketing.

Exceptional technical access may be necessary only to maintain the system, resolve a security incident or fulfil a customer's request to access, correct or delete their data. Such access is limited to the minimum information required. Technical providers may not use the data for their own purposes, and data is disclosed to public authorities only where required by law.

Data transfers

Stels 88 OÜ does not knowingly transfer booking data outside the European Economic Area. If a technical service involves international processing, safeguards required by the GDPR are applied.

Retention period

Data relating to a booking and the provision of a service is retained for three years from the date of the visit, cancellation or the last communication concerning that booking. This period is necessary for responding to enquiries, resolving possible disputes and protecting legal claims.

After that period, data is deleted or irreversibly anonymised unless a longer retention period is required by law.

Deletion of data

A customer may request deletion of their personal data at any time by writing to info@stels.ee. We will delete the data if it is no longer required to manage an active booking, comply with a legal obligation or protect legal claims.

If immediate complete deletion is not possible, we will explain the reason and the remaining retention period. The data will be deleted or anonymised when the mandatory period ends.

Your rights

You have the right to obtain information about processing, request access, rectification, erasure or restriction, object to processing based on legitimate interests and, where applicable, receive data in a portable format. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

Send requests to info@stels.ee. We generally respond within one month. You may also lodge a complaint with the Estonian Data Protection Inspectorate: aki.ee.

Cookies and automated decisions

The website may use technical cookies necessary for correct and secure operation. Analytics or advertising cookies are not used without the required choice or consent.

We do not make decisions about customers based solely on automated processing or profiling that produce legal or similarly significant effects.

Security and changes

We apply reasonable technical and organisational measures to protect data against unauthorised access, alteration, disclosure or loss.

We may update this policy if our services, technical solutions or legal requirements change. The current version is always published on this page with its latest update date.