Effective from: 20.08.2026

1. General

This privacy policy describes how Pesupanda OÜ (registry code 10145900, address Aiandi 4/1, 12915 Tallinn, Estonia; hereinafter Pesupanda) processes the personal data of customers and visitors of the website pesupanda.ee. For data protection matters, contact: phone +372 600 22 66, e-mail info@pesupanda.ee.

2. What data Pesupanda processes and why

Courier order form on the website. The customer’s name, phone number, e-mail, pickup and return address with postal code, selected dates and times, and optional notes for the courier. For business orders, also the company name, registry code and legal address (via business registry autocomplete). Purpose: receiving and fulfilling the order, courier logistics and order-related notifications by e-mail. Legal basis: performance of a contract and pre-contractual measures. Retention: as long as necessary for fulfilling the order and resolving related claims; the customer may request deletion of their data at any time (see section 6).

Contact forms, e-mail and phone. When the customer contacts Pesupanda, their name, contact details and the content of the message are processed in order to respond. Legal basis: legitimate interest in responding to inquiries and pre-contractual measures. Retention: as long as necessary to resolve the inquiry.

Customer register at service points. To provide the service, Pesupanda keeps a customer register in its point-of-sale system: the customer’s name, contact details and order history. Purpose: receiving and handing over items to the correct customer, service quality and resolving claims. If the customer has not collected their items, Pesupanda sends a reminder by e-mail. Legal basis: performance of a contract. Retention: for the duration of the customer relationship; the customer may request deletion of their data at any time, unless retention is required by law.

Accounting. Data on invoices and payment documents is retained for 7 years under the Estonian Accounting Act.

Feedback surveys. If the customer has provided an e-mail address, Pesupanda may send a satisfaction survey after the service (in cooperation with the service provider Recommy). The customer can opt out via the link in the survey. Legal basis: legitimate interest in assessing service quality. Pesupanda does not send marketing e-mails or newsletters.

Video surveillance. Pesupanda’s service points in Mustamäe and Haabersti use surveillance cameras with video and audio recording to protect people and property and to resolve claims related to customers’ items. As claims concerning seasonal garments may arise months later, recordings are retained until automatically overwritten (the retention period depends on the storage capacity of the recording device). Recordings are accessible only to authorised staff. Notification signs are displayed in the monitored areas. Legal basis: legitimate interest.

3. Cookies, analytics and marketing

The website uses cookies and similar technologies based on the customer’s consent, managed via the cookie banner. The customer can change their choices at any time: Change cookie settings.

• Statistics: Google Analytics 4 – usage statistics based on consent (Google Consent Mode).
• Marketing and conversion measurement: Google Ads and the Meta (Facebook/Instagram) pixel and Conversions API. With consent, contact details entered in forms (e.g. e-mail, phone) may be transmitted to Meta in hashed (pseudonymised) form to measure advertising performance.
• The cookie banner’s own data processing (consent log, including IP address and choices made) is described in a separate section at the end of this page.

4. Functional services of the website

The order form and the website use the following services; when used, the customer’s IP address and the entered query reach the respective service provider:

• In-ADS address search (Estonian Land Board): entering an address sends queries to the Land Board’s address service; the service also loads a Google Fonts typeface (the IP address is transmitted to Google).
• Business registry autocomplete (RIK): entering a company name sends a query to the business registry search service.
• Google Maps: the map is loaded only with the customer’s consent.
• Google reCAPTCHA: for spam protection, loaded based on consent.

5. Processors and data transfers

Pesupanda uses service providers who process data on Pesupanda’s behalf: web hosting Zone Media OÜ, point-of-sale system Ektaco AS (Compucash), feedback surveys Recommy. For Google and Meta services, processing may take place outside the European Economic Area; transfers are based on the European Commission’s standard contractual clauses and the providers’ valid certifications. Pesupanda does not sell personal data.

6. Customer rights

The customer has the right to access their data, request its rectification or erasure, restrict processing, object to processing, request data portability, and withdraw consent at any time (this does not affect the lawfulness of processing carried out before withdrawal). Requests: info@pesupanda.ee or +372 600 22 66. The customer has the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

7. Changes

Pesupanda may update this privacy policy. The current version, with its effective date, is always available on this page.

Data processing by the consent tool

To manage the cookies and similar technologies used (tracking pixels, etc.) and the related consents, Pesupanda uses the consent tool “Real Cookie Banner”. The tool documents the consents given by the customer (the choices made, timestamp and IP address) so that Pesupanda can prove that consent was obtained. Details on how the tool works: devowl.io/rcb/data-processing. Legal basis: compliance with a legal obligation (Art. 6 (1) (c) GDPR) and legitimate interest (Art. 6 (1) (f) GDPR) – managing the cookies used and the related consents. The provision of this data is not contractually required; if the customer does not provide the data, Pesupanda cannot manage their consents.