Privacy Policy

1. Important Information and Who We Are

Purpose of this privacy statement

The purpose of this privacy statement is to provide information about how M&V Trade OÜ collects and processes your personal information through the use of this website, including information you may provide when subscribing to a newsletter, purchasing a product or service, or participating in a competition or event through this website.

This website is not intended for children and we do not knowingly collect information about children.

You must read this Privacy Notice, along with any other privacy notices or fair processing notices we may provide, when collecting or processing your personal information in specific cases so that you are fully aware of how and why we use your information. This privacy statement supplements and does not take precedence over other notices.

2. Data collected about you

Personal data or personal information means any information about an individual that can be used to identify that person. It does not include data that cannot be identified (anonymous data).

We may collect, use, store, and transmit a variety of the following personal information about you:

  • Personal data includes first name, maiden name, surname, username or similar identifier, marital status, job title, date of birth, and gender.
  • Contact details include billing address, shipping address, email address, and phone numbers.
  • Financial Data includes bank account and payment card information.
  • Transaction details include the amounts paid to you and by you, and other details of products and services purchased from us.
  • Specifications include Internet Protocol (IP) address, your login information, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology related to the devices you use to access this website.
  • Profile information includes your username and password, purchases or orders you make, interests, preferences, feedback, and survey responses.
  • Usage Data includes information about your use of the products and services on our website.
  • Marketing and communications data includes your preferences for receiving our marketing and our third parties, as well as your communication preferences.

We also collect, use, and share aggregated data for any purpose, such as statistical or demographic data. Aggregate data may come from your personal data, but it is not considered personal data by law, as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users of a particular website feature. However, if we combine aggregated data with your personal information in a way that directly or indirectly identifies you, we will treat the aggregated data as personal data used under this Privacy Notice. We do not collect any specific categories of personal information about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric information). We also do not collect information on criminal convictions and offences.

If you do not provide personal information

If we are required by law or under the terms of a contract with you to collect personal information, and if you do not provide such information upon request, we may not be able to perform the contract between us or the contract to be entered into (for example, to provide you with goods or services). In this case, we may need to cancel your order for your product or service, but we will notify you.

3. How is your personal information collected?

We use a variety of methods to collect information about you using:

Direct communication

You may provide us with your personal, contact, and financial information by filling out forms or replying to us by mail, telephone, email, or otherwise. This includes the personal information you provide if:

  • you want to buy our products or services;
  • you create an account on our website;
  • you order our service or publication;
  • you communicate with us on social media;
  • you download or install applications;
  • you request marketing information;
  • you participate in a contest, advertisement, survey, or event, give us feedback, or file a complaint.

Automated technologies or interactions.

When you use our website, we may automatically collect technical information about your devices, browsing activities, and patterns. We collect this personal information through cookies, server logs, and other similar technologies. We may also receive technical information about you when you visit other websites that use our cookies. Please read our cookie policy below for more information.

4. How do we use your personal information?

We use your personal information only when permitted by law, and we never sell your information to third parties. We typically use your personal information in the following circumstances:

  • If we have to fulfill a contract concluded or to be concluded with you.
  • If it is necessary for our (or a third party’s) legitimate interests and if your interests and fundamental rights do not outweigh those interests.
  • If we have to meet legal or regulatory obligations.

As a general rule, we do not rely on consent as a legal basis for the processing of your data, except for regarding marketing communications.

Purposes for the use of your data

We have described below how we intend to use your data and the legal bases on which we rely. We have also identified our legitimate interests, where relevant.

Please note that we may process your data on more than one legal basis, depending on the specific purpose for which we use your data. Please contact us for details on the specific legal basis on which we rely for the processing of your data, if more than one is provided below.

Purpose / activity:
Register as a new customer

Legal basis for Processing
(a) Fulfilment of your contract with you

Purpose / activity:
For processing and delivering orders for products or services, including:
(a) To manage payments and fees
(b) To recover an amount due to us

Legal basis for Processing
(a) Fulfilment of your contract with you
(b) Necessary for our legitimate interests

Purpose / activity
To manage communication with you, which includes:
(a) Notifying you of changes to our terms or privacy policy
(b) Requesting a review or response to a survey

Legal basis for Processing
(a) Fulfilment of your contract with you
(b) Necessary to fulfil a legal obligation
(c) Necessary for our legitimate interests (to update our data and to investigate how customers use our products/services)

Purpose / activity:
Allow you to participate in a raffle, event, contest, or study

Legal basis for Processing
(a) Fulfilment of your contract with you
(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop these products/services, and to expand our business)

Purpose / activity:
Manage and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting)

Legal basis for Processing
(a) Necessary for our legitimate interests (in managing our business, providing administrative and IT services, network security, fraud prevention, and in the course of corporate or group reorganization)
(b) Necessary to fulfil a legal obligation

Purpose / activity:
Deliver relevant content to you and measure or understand the effectiveness of the marketing offered to you

Legal basis for Processing
(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop these products/services, to expand our business, and to communicate our market strategy)

Purpose / activity:
Use data analytics to improve our website, products/services, marketing, customer relationships, and experience

Legal basis for Processing
(a) Necessary for our legitimate interests (defining customer types for our products and services, updating and maintaining our website, developing the company, and introducing a marketing strategy)

Purpose / activity:
To make suggestions and recommendations to you regarding goods or services that may be of interest to you

Legal basis for Processing
(a) Necessary for our legitimate interests (development of our products/services and expansion of the company)

Purpose / activity:
To conduct marketing campaigns by e-mail and to send marketing communications by e-mail. This communication includes information about the products, services, events, offers, and advertisements offered from time to time.

Legal basis for Processing
(a) If you have expressly agreed to receive such marketing notice or have any other legal right to do so

Cookies

You can set your browser to refuse all or some of your browser’s cookies or to notify you when websites set or access cookies. If you disable or decline cookies, please note that some parts of this website may be inaccessible or may not work properly. For more information on the cookies used, please read the cookie usage rules below.

Change of purpose

We will only use your data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is compatible with the original purpose. If you would like an explanation of how the processing for a new purpose is compatible with the original purpose, please contact us.

If we have to use your data for an independent purpose, we will inform you and explain the legal basis for this.

If required or permitted by law, we have the right to process your personal information without your knowledge or consent under the above rules.

5. Disclosure of Your Personal Information

If it is legal, we sometimes share your personal information with trusted third parties. For example, other organizations in our group; third-party organizations that provide applications/features; computing or IT services; couriers; third-party organizations that help us manage advertising campaigns; recruitment agencies and related organizations; auditors, lawyers, accountants and other professional advisors; law enforcement or other government and regulatory agencies; credit card and payment service providers; third-party email marketing and CRM professionals; and other third parties who help us personalize your offerings and meet our obligations to customers.

Such third parties include, but are not limited to:

  • Internal third parties according to the glossary below.
  • External third parties according to the glossary below.
  • Third parties to whom we decide to sell, transfer, or merge our business or property. We may also acquire or merge with other companies. If there is a change in our business, the new owners will have the right to use your personal information in the same way as set out in this privacy statement.

When we share personal information with others, we use contractual agreements and security mechanisms to protect personal information and to comply with our data protection, confidentiality, and security requirements; we never sell your information to third parties.

6. Data Security

We have put in place appropriate security measures to prevent the unintentional loss, use, or unauthorized access, alteration, or disclosure of your personal information. Also, we restrict access to your personal information to employees, agents, contractors, and other businesses who need to know it for business purposes. They will only process your data under our instructions and will be subject to the obligation of confidentiality.

We guarantee access to all the transaction areas and applications of our website using HTTPS technology.

We regularly monitor our system for possible vulnerabilities and attacks, and we carry out security hole testing to find ways to further strengthen our security.

We have established procedural rules for all possible personal data breaches, and we will notify you and all the legislators of any breach if we have a statutory obligation to do so.

7. Data Retention

We retain your data only for as long as is necessary to achieve the purposes for which we collected them, including to fulfil any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we take into account the amount, nature, and sensitivity of personal data; the potential harm caused by unauthorised use or disclosure of your data; and the purposes for which we process your data and whether we can achieve these objectives by other means; and applicable legal requirements.

At the end of the retention period, your data will be completely erased or rendered anonymous – for example, by aggregation with other data – so that they can be used in an unidentified way for statistical analysis and business planning.

8. Your legal rights

Under certain circumstances, you have rights under data protection laws related to your data. If you wish to use any of the following rights, please contact us at mvtrade@mvtrade.ee.

  • Request access to your data (known as the “data subject’s Access Application Form”). This allows you to obtain a copy of the personal data we have about you, and you can check whether we are processing them legally.
  • Request the rectification of personal data in our possession. This allows you to correct incomplete or inaccurate data in our possession, even though we may need to verify the correctness of the new data that you have provided.
  • Request deletion of your data. This allows you to request the deletion or removal of your data if we do not have a valid reason to process it.You also have the right to ask us to delete or remove your data if you have successfully used the right of objection to processing (see below), if we have unlawfully processed your information or if we are required to erase your data in connection with the law.However, we may not always be able to comply with our deletion requirements for specific legal reasons, which you will be notified of if necessary when submitting your application.
  • An objection to the processing of your data, if we rely on a legitimate interest (or a legitimate interest of the third parties) and you wish to object to the processing in relation to your specific situation because you think it affects your fundamental rights and freedoms. You also have the right to object if we process your data for direct marketing purposes. In some cases, we may provide compelling legitimate bases for processing your information that takes precedence over your rights and freedoms.
  • Request restriction of processing of your data. This allows you to request us to suspend the processing of your data in the following situations: (a) If you want us to check the correctness of the data; (b) If our use of the data is unlawful, but you do not want us to delete them; c) If you need to keep the data, even if we no longer need them, because you need them to submit, exercise, or defend legal claims; or (d) if you have submitted an objection to the use of your data, but we need to check whether we have the legal bases to use them.
  • Request the transfer of your data to you or a third party. We or a third party you have chosen will present your data in a structured, commonly used, machine-readable format. Please note that this privilege applies only to the automated information that you originally gave us, or when we used this information to fulfil an agreement with you.
  • If you wish to consent to the processing of your data, you can withdraw your consent at any time. However, this shall not affect the lawfulness of the data’s processing before the withdrawal of consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We advise you of this when you withdraw your consent.

Usually, there will not be a charge

Access to your data (or the use of other rights) is free of charge. However, if your application is manifestly unfounded, repetitive, or excessive, we will take a reasonable fee. Alternatively, we may refuse to comply with your request in such a situation.

What we need from you

We may ask you for accurate information that will help us identify you and ensure that you can access your data (or exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who is not entitled to receive it. We may also contact you to ask for more information about your request, to expedite your response.

Reply deadline

We strive to respond to all legitimate requests within one month. If your application is particularly complex or if you have submitted several applications, then the answer may take beyond a month. In this case, we will update you and keep you informed.

9. Dictionary

LEGAL BASIS

Legitimate interest means our company’s interest in the management and administration of the company to enable us to provide you with the best service/product and the best and safest experience.

We will certainly consider and balance the potential impact on you (both positive and negative) and your rights before we process your data for our legitimate interests. We do not use your data for activities where the impact on you is greater than our interests (otherwise, if we have your consent or if otherwise required or permitted by law). For more information on how we assess our legitimate interests in relation to any of the potential effects of a specific activity on you, you can contact us.

Execution of the contract means the processing of your data when it is necessary for the execution of a contract to which you are a party or before concluding such a contract with you.

Compliance with a legal or regulatory obligation means the processing of your data when it is necessary to fulfil a legal or regulatory obligation under our law.

THIRD PARTIES

External third parties
  • Professional advisers acting as co-managers or processors, including lawyers, bankers, auditors, and insurers, who provide advisory, banking, legal, insurance, and accounting services.
Other third parties:

Google Analytics, Google Cloud, Google Business, Omniva, Itella, DPD

Website cookies

Our website uses some key cookies;

We have a session cookie, which is a small file on our server that allows us to differentiate you from other users so that we can keep a virtual “basket” of products added to your cart.

The second cookie identifies whether your browser supports JavaScript. This helps us to provide the best possible experience when using our website.

We also use Google Analytics, which places a small cookie file in your computer’s browser. This cookie does not store personal information about you but monitors how you browse our website. We use this anonymous information to help us further improve your shopping experience on our website.

Some mvtrade.com pages use content embedded from other websites, such as YouTube. In this case, cookies may be sent to you from these websites. We do not control these cookies, and we encourage you to contact third parties for more information about cookies.

We do not sell or disclose information collected by cookies to third parties unless required to do so by law (for example, to government and law enforcement agencies). We treat your information as sensitive and confidential.

If you continue without changing your settings, we expect you to be happy to accept all cookies on the mvtrade.ee website.

If cookies are not enabled on your device, it means that your shopping experience on our website is limited to browsing and researching. In this case, you will unfortunately not be able to add products to or purchase products in the cart.