Privacy Policy

Privacy Policy — Anmar Motors OÜ

1. General Provisions

1.1. This Privacy Policy is drafted in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR), the Personal Data Protection Act of the Republic of Estonia, Estonian and EU legislation, and guidelines from the Data Protection Inspectorate.

1.2. This policy governs the principles of collecting, processing, and storing personal data. Personal data is collected, processed, and stored by Anmar Motors OÜ (hereinafter “data controller”). Anmar Motors OÜ is engaged in the sale of auto parts and accessories.

1.3. Anmar Motors OÜ reserves the right to modify the Privacy Policy if necessary and publish the updated version on the website anmar-motors.ee.

1.4. For the purposes of this Privacy Policy, a data subject is any client or other individual whose personal data is processed by the data controller. A client is anyone purchasing goods or services through the website.

1.5. By placing an order on the Anmar Motors OÜ website, the data subject agrees to the terms of this Privacy Policy.

1.6. By providing personal data, the data subject gives the data controller the right to collect, use, and manage personal data for the purposes described in this Privacy Policy.

1.7. The data controller complies with legal principles for processing personal data, including legality, fairness, and security.

1.8. Organizational and technical measures are implemented to prevent accidental or unlawful destruction, alteration, disclosure, or other unlawful processing of personal data.

1.9. Personal data is collected electronically via the website and email, as well as on-site at the company’s premises.

1.10. The data subject is responsible for the accuracy and completeness of the provided data and must notify the data controller of any changes.

1.11. The data controller is not liable for damages caused by the provision of false information.

2. Legal Basis for Processing Personal Data

2.1. Personal data is processed under Article 6(1)(a), (b), (c), and (f) of the GDPR:

  • a) Consent of the data subject;
  • b) Performance of a contract;
  • c) Compliance with legal obligations;
  • f) Legitimate interest of the controller, provided it does not override the rights of the data subject.

2.2. The source of personal data is the order placed on the website. Providing personal data is necessary to enter into a purchase agreement.

3. Personal Data Processing

3.1. The following personal data may be processed:

  • Full name;
  • Phone number;
  • Email address;
  • Delivery and billing address;
  • Payment method;
  • Purchase history;
  • Bank account number;
  • Call recordings (for support purposes).

3.2. The controller does not see card details; payments are processed via PayPal, Everypay, Montonio, and LHV Finance.

4. Purpose of Data Processing

4.1. Personal data is processed for:

  • Managing and fulfilling orders and deliveries;
  • Customer support, claims, and warranty fulfillment;
  • Refunds;
  • Resolving disputes and improving service quality.

5. Data Storage

5.1. Data is stored on servers within the EU (Hetzner Online GmbH, Zone Media OÜ).

5.2. Retention depends on processing purpose and applicable laws.

5.3. Purchase history is stored for 7 years.

5.4. Inactive accounts are retained for 3 years, after which the account is closed.

5.5. Data required for accounting purposes is stored for 7 years.

6. Data Sharing with Third Parties

6.1. Personal data may be shared with customer support, accountants, transport and courier companies, manufacturers, and service providers.

6.2. Personal data is not shared with third parties without a legal basis.

7. Data Transfer to Third Countries

7.1. Personal data is generally not transferred outside the EU.

7.2. If necessary, transfers ensure an equivalent level of protection.

8. Cookies

8.1. The website uses cookies for functionality and analytics.

8.2. Users may disable cookies in their browser, but this may limit website functionality.

9. Video Surveillance

9.1. Surveillance cameras are installed on company premises to protect property.

9.2. Recordings are stored 2–6 months and shared only for legal purposes.

10. Phone Call Recordings

10.1. Calls to customer support are recorded with the data subject’s consent.

10.2. Recordings are used to resolve disputes and improve service.

10.3. Call recordings are stored for 30 days.

11. Rights of the Data Subject

11.1. Data subjects can access their personal data via their account or by contacting support at info@anmarmotors.ee.

11.2. Data subjects may correct, update, delete data, withdraw consent, and lodge complaints with supervisory authorities.