{"id":929,"date":"2026-05-09T11:58:46","date_gmt":"2026-05-09T08:58:46","guid":{"rendered":"https:\/\/kupee.ee\/privacy-policy\/"},"modified":"2026-08-04T20:22:27","modified_gmt":"2026-08-04T17:22:27","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/kupee.ee\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<div style=\"height:175px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<h1 class=\"wp-block-heading\">Privacy Policy<\/h1>\n\n<p class=\"wp-block-paragraph\"><strong>Effective as of:<\/strong> August 1, 2026<\/p>\n\n<p class=\"wp-block-paragraph\">This Privacy Policy explains how Kupee O\u00dc processes the personal data of customers of the <strong>kupee.ee<\/strong> website.<\/p>\n\n<h2 class=\"wp-block-heading\">1. Data Controller<\/h2>\n\n<ul class=\"wp-block-list\">\n<li><strong>Company:<\/strong> Kupee O\u00dc<\/li>\n\n\n\n<li><strong>Registration Number:<\/strong> 17531138<\/li>\n\n\n\n<li><strong>Address:<\/strong> 1a Kesk Street, M\u00f5isak\u00fcla, Mulgi Municipality, Viljandi County<\/li>\n\n\n\n<li><strong>Email:<\/strong> hei@kupee.ee<\/li>\n\n\n\n<li><strong>Phone:<\/strong> +372 60000 60<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">2. What personal data do we process?<\/h2>\n\n<p class=\"wp-block-paragraph\">During the booking process and the provision of services, we process the following data:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>first name and last name;<\/li>\n\n\n\n<li>email address and phone number;<\/li>\n\n\n\n<li>reservation details (selected compartment, dates, additional services, reservation total);<\/li>\n\n\n\n<li>Data transmitted during communication (e.g., emails, inquiries).<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Payment data (bank and card information) is processed by the payment service provider Maksekeskus AS \u2014 Kupee O\u00dc does not collect or store this data (see section 4).<\/p>\n\n<h2 class=\"wp-block-heading\">3. Purpose and Legal Basis for the Processing of Personal Data<\/h2>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Objective<\/th><th>Legal Basis<\/th><\/tr><\/thead><tbody><tr><td>Fulfilling a Reservation and Providing a Service<\/td><td>Performance of the Contract<\/td><\/tr><tr><td>Customer Communication and Support<\/td><td>Performance of the Contract \/ Legitimate Interest<\/td><\/tr><tr><td>Accounting and Compliance with Legal Obligations<\/td><td>Legal Obligation<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<h2 class=\"wp-block-heading\">4. Payment Processing and the Role of Maksekeskus AS<\/h2>\n\n<p class=\"wp-block-paragraph\">To process payments made on the website, the information required to complete the payment (e.g., the customer\u2019s name, email address, and payment amount) to the payment service provider <strong>Maksekeskus AS<\/strong> (trademark <strong>MakeCommerce<\/strong>), registration code 12268475, address Liivalaia 45, Tallinn 10145.<\/p>\n\n<p class=\"wp-block-paragraph\">The payment is processed in Maksekeskus AS\u2019s secure payment environment outside the kupee.ee website. Maksekeskus AS is the independent data controller responsible for processing payments and processes personal data in accordance with its privacy policy, which is available on the makecommerce.net website. <\/p>\n\n<p class=\"wp-block-paragraph\">Card payments may also be processed through the service provider <strong>Stripe<\/strong> (WooPayments). Stripe is also an independent data processor responsible for processing payments and processes personal data in accordance with its privacy policy, which is available on the website stripe.com. <\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Kupee O\u00dc does not collect or store customers&#8217; bank or card information.<\/strong><\/p>\n\n<h2 class=\"wp-block-heading\">5. Disclosure of Data to Third Parties<\/h2>\n\n<p class=\"wp-block-paragraph\">Personal data may be disclosed only to the extent necessary for the provision of the service to the following parties, who act as authorized processors of Kupee O\u00dc and process data in accordance with Kupee O\u00dc\u2019s instructions:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>payment service provider Maksekeskus AS;<\/li>\n\n\n\n<li><strong>Nebro O\u00dc<\/strong>, which provides Kupee O\u00dc with a reservation and customer management system and whose databases store reservation and customer data;<\/li>\n\n\n\n<li><strong>Anweb O\u00dc<\/strong>, which provides customer service, cleaning, and maintenance for Kupee O\u00dc and has access to booking data to the extent necessary for these purposes;<\/li>\n\n\n\n<li>an email and SMS service provider (for sending booking confirmations and PIN codes);<\/li>\n\n\n\n<li>accounting service provider;<\/li>\n\n\n\n<li>if necessary, government agencies to fulfill their legal obligations.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Personal data will not be disclosed to third parties for marketing purposes without the customer&#8217;s consent.<\/p>\n\n<h2 class=\"wp-block-heading\">6. Retention of Personal Data<\/h2>\n\n<p class=\"wp-block-paragraph\">Personal data is retained for as long as necessary to fulfill the purpose of processing. Source documents for accounting purposes are retained for 7 years in accordance with the Accounting Act. Data for which there is no legal basis for retention will be deleted.  <\/p>\n\n<h2 class=\"wp-block-heading\">7. Cookies<\/h2>\n\n<p class=\"wp-block-paragraph\">This website uses cookies to ensure the site functions properly and to improve the user experience. Users can manage cookie settings in their browser settings. <\/p>\n\n<h2 class=\"wp-block-heading\">8. Customer Rights<\/h2>\n\n<p class=\"wp-block-paragraph\">The customer has the right to:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>access the personal data collected about him or her;<\/li>\n\n\n\n<li>request the correction of inaccurate data;<\/li>\n\n\n\n<li>request the deletion of data if there is no legal basis for retaining it;<\/li>\n\n\n\n<li>to restrict or object to the processing of data;<\/li>\n\n\n\n<li>request the transfer of data.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">To exercise your rights, please contact us at hei@kupee.ee.<\/p>\n\n<h2 class=\"wp-block-heading\">9. Complaints<\/h2>\n\n<p class=\"wp-block-paragraph\">If a customer believes that their rights have been violated in connection with the processing of their personal data, they have the right to contact the Data Protection Inspectorate (aki.ee).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Effective as of: August 1, 2026 This Privacy Policy explains how Kupee O\u00dc processes the personal data of customers of the kupee.ee website. 1. Data Controller 2. What personal data do we process? During the booking process and the provision of services, we process the following data: Payment data (bank and card information) [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-929","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/pages\/929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/comments?post=929"}],"version-history":[{"count":0,"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/pages\/929\/revisions"}],"wp:attachment":[{"href":"https:\/\/kupee.ee\/en\/wp-json\/wp\/v2\/media?parent=929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}