Skip to main content

Privacy Policy

Effective from: February 25, 2026 | Version 1.2

1. Data Controller

MTÜ Särevärin
Registry code: 80621511
Address: Spordi 2-5, 68207 Valga, Estonia
Email: [email protected]

2. Data We Collect

We collect the following personal data:

  • Identification data: name, email address
  • Authentication data: Google account ID and profile picture (when signing in with Google)
  • Transaction data: order history, purchased products, payment status
  • Delivery data: delivery address or selected parcel locker/pickup point provider, point ID, name, and address
  • Communication data: feedback form responses, email correspondence
  • Technical data: IP address, browser type (for session management only)

Note: We do not collect or process health, biometric, or other special category data.

3. Legal Basis for Processing

We process your data based on (GDPR Article 6):

  • Contract performance (art. 6(1)(b)): processing ticket and product orders, organizing the event
  • Legal obligation (art. 6(1)(c)): retaining accounting records
  • Legitimate interest (art. 6(1)(f)): customer service, event improvement
  • Consent (art. 6(1)(a)): marketing communications (if you have consented)

4. How We Use Your Data

We use your data to:

  • Register you for the rally and send event information
  • Process orders, deliver products, and provide customer service
  • Store parcel locker/pickup point selections and fulfill orders
  • Generate invoices and manage payments
  • Improve event quality (anonymous statistics)
  • Comply with legal obligations

5. Data Sharing and Transfers

We do not sell your personal data. We share data only with partners necessary for service delivery:

  • Stripe, Inc. (USA) – payment processing. Stripe is certified under the EU-US Data Privacy Framework.
  • RoadbookRally.com – rally registration system
  • Google Ireland Ltd – authentication (Google OAuth)
  • Omniva / SmartPosti (Itella SmartPOST) / DPD – delivery and parcel-locker/pickup-point services (where required for order fulfillment)
  • Railway, Inc. (USA) – web hosting. Data is stored on EU servers.

Note: We may sync parcel locker / pickup point location lists from provider public data sources. These location lists are not personal data until linked to your order selection.

We may also share data when required by law or competent authorities.

6. Data Retention

  • Account and order data: 3 years after last purchase or participation
  • Accounting records: 7 years (as required by Estonian Accounting Act)
  • Marketing consents: until consent is withdrawn
  • Feedback: 2 years

After the retention period, data is deleted or anonymized.

7. Your Rights

Under GDPR, you have the right to:

  • Access: obtain a copy of your data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data ("right to be forgotten")
  • Restriction: limit how your data is used
  • Data portability: receive data in a structured format
  • Object: object to direct marketing
  • Withdraw consent: at any time, without retroactive effect

To exercise your rights, email: [email protected]
We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Tatari 39, 10134 Tallinn, Estonia
Email: [email protected]
Web: www.aki.ee

9. Cookies

We only use strictly necessary cookies:

  • Session cookie (authentication, shopping cart)
  • Language preference

We do not use tracking cookies, advertising cookies, or third-party analytics. Therefore, cookie consent is not required.

10. Automated Decision-Making

We do not use automated decision-making or profiling that would produce legal effects concerning you.

11. Policy Changes

We may update this policy from time to time. For significant changes, we will notify you via email or through the website. Continued use of the service after changes constitutes acceptance of the new policy.

12. Contact

For data protection inquiries:
Email: [email protected]
Postal address: MTÜ Särevärin, Kaasiku tn 22, Ülenurme alevik, 61714 Kambja vald, Estonia

← Back to home