Privacy Policy
1. GENERAL INFORMATION
This Privacy Policy explains how personal data is collected, used, and protected when you use www.vitaran.ee (the “Website”).
The Website is operated by:
Estetix Group OÜ
Registration number: 11305263
Address: Kadaka tee 133, Tallinn, 12915, Estonia
Email: info@vitaran.ee
Estetix Group OÜ is the data controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
2. SCOPE OF APPLICATION
This Privacy Policy applies to:
- Registered business clients
- Medical professionals using the Website
- Representatives of legal entities
- Website visitors
We process personal data strictly in connection with professional and business activities.
3. PERSONAL DATA WE COLLECT
We may collect the following categories of personal data:
3.1 Information Provided by the Client
- Full name
- Company name
- Registration number
- VAT number
- Professional qualification details
- Billing and delivery address
- Email address
- Phone number
- Account login credentials
3.2 Automatically Collected Data
When visiting the Website, we may collect:
- IP address
- Browser type
- Device information
- Access time and date
- Pages visited
- Cookies and usage data
4. PURPOSE AND LEGAL BASIS FOR PROCESSING
We process personal data for the following purposes:
- Account registration and verification
- Order processing and fulfillment
- Payment processing
- Customer support
- Compliance with legal and accounting obligations
- Fraud prevention
- Website security
- Communication regarding orders and services
Legal bases under GDPR:
- Performance of a contract (Article 6(1)(b))
- Legal obligation (Article 6(1)(c))
- Legitimate interest (Article 6(1)(f))
- Consent (where applicable)
5. PAYMENT PROCESSING
Payments are processed via secure third-party providers such as Stripe, Montonio, or other payment service providers displayed at checkout.
We do not store full payment card details on our servers.
Payment providers act as independent data controllers and process data according to their own privacy policies.
6. DATA RETENTION
We retain personal data:
- For the duration of the business relationship
- As required by Estonian accounting law (typically 7 years)
- As required for legal claims
After the retention period, personal data will be securely deleted or anonymized.
7. DATA SHARING
We may share personal data with:
- Payment service providers
- Courier and logistics companies
- IT service providers
- Accountants and legal advisors
- Public authorities when legally required
We do not sell personal data.
8. INTERNATIONAL DATA TRANSFERS
If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented in accordance with GDPR, including Standard Contractual Clauses where required.
9. DATA SECURITY
We implement appropriate technical and organizational measures to protect personal data against:
- Unauthorized access
- Alteration
- Disclosure
- Accidental loss
However, no online transmission can be guaranteed to be completely secure.
10. DATA SUBJECT RIGHTS
Under GDPR, you have the right to:
- Access your personal data
- Request correction
- Request deletion (where legally applicable)
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent (where applicable)
- Lodge a complaint with the Estonian Data Protection Inspectorate
Requests may be sent to:
info@vitaran.ee
11. COOKIES
The Website uses cookies necessary for:
- Website functionality
- Security
- Analytics
You may control cookies through browser settings.
A separate Cookie Policy may be provided.
12. PROFESSIONAL USE
The Website is intended exclusively for professional and business use. We do not knowingly collect data from consumers or individuals acting outside professional activities.
13. CHANGES TO THIS POLICY
We reserve the right to update this Privacy Policy at any time.
Updated versions will be published on www.vitaran.ee
Last updated: 01.02.2025