1. General Information

Data Controller:
MAARDU RAUDTEE AKTSIASELTS
10049295
Kombinaadi tn 7, 74114 Maardu linn, Harju maakond
maardu@raudtee.ee
+3725288669

2. What Data We Collect

2.1. Data Provided by the User

• Name
• Email
• Phone
• Message text

2.2. Data Collected Automatically

• IP address
• Browser and device information
• Server logs
• Cookies (cookie ID)

2.3. Data Collected via Third-Party Services

• Google Analytics
• Google Maps

3. Purposes of Data Processing

3.1. Provision of Services

• Responding to inquiries

3.2. Performance of a Contract

• Customer support

3.3. Legal Obligations

• Dispute resolution

3.4. Marketing

• Email newsletters
• Personalized offers

3.5. Analytics

• Behavior analysis
• Traffic measurement

4. Disclosure of Data to Third Parties

Data may be shared with:

• Google LLC
• Meta Platforms
• delivery service providers (Omniva, DPD, Itella)
• payment service providers (Stripe, PayPal, Maksekeskus)
• accounting service providers
• email marketing services (Mailchimp, Brevo)

5. Retention Periods

• Logs: 30–180 days

6. User Rights

• Access to data
• Rectification
• Erasure
• Withdrawal of consent
• Data portability
• Opt-out of marketing

7. How to Exercise Your Rights

The user may:

• The user may:
  write to maardu@raudtee.ee

8. Data Security

• SSL
• Access restriction
• Backups

9. Transfers Outside the EU

For Google, Meta, Mailchimp:

• Standard Contractual Clauses (SCC)
• EU–US Data Privacy Framework

10. Contacts

MAARDU RAUDTEE AKTSIASELTS
Kombinaadi tn 7, 74114 Maardu linn, Harju maakond
maardu@raudtee.ee
+3725288669