Privacy policy
In force from 22.10.2026. How Rehviportaal and the shops use your data.
Who processes the data
The controller of your booking data is the shop you book with. Turundus OÜ (registry code 11763540, Tartu mnt 133, 10112 Tallinn) runs Rehviportaal and processes that data on the shop's behalf. Turundus OÜ is the controller of prepayment and refund data.
What data, and why
| Data | Purpose | Basis |
|---|---|---|
| Name, phone, email, plate number and car details, notes | Serving the booking, confirmation and reminders | Performance of the contract |
| Name, phone, email, registration number, topic and message of an enquiry | Answering an enquiry sent from a shop's page | Steps taken before entering into a contract |
| Payment amount and status, payer's name and account | Prepayment, refunds, accounting | Performance of the contract, legal obligation |
| Email, phone | Offers | Consent |
| Cookies and usage data | Statistics and ad measurement | Consent |
Who receives the data
- Payment service provider — processing prepayments
- Convex — database and servers
- Vercel — website hosting
- Resend — sending email
- Messente — sending SMS
- Sentry — error tracking
- Google — statistics and advertising, only with your consent
Some providers are outside the European Economic Area; transfers use the European Commission's standard contractual clauses. Data is never sold.
How long data is kept
Customer data is anonymised once the shop's set period has passed since your last booking (36 months by default). Enquiries sent from a shop's page are deleted after 6 months. Accounting records are kept for 7 years, as the law requires.
Your rights
You have the right to see your data, correct it, have it erased, restrict or object to its processing, receive it in a portable form and withdraw consent at any time. Contact the shop or write to info@rehviportaal.ee. You may complain to the Data Protection Inspectorate (www.aki.ee).