Privacy Policy
Last updated: 30/06/2026
Eknord respects the privacy of its clients and website visitors and processes personal data responsibly, purposefully and only to the extent necessary.
1. Data Controller
The data controller of personal data is:
Eknord Interiors OÜ
Registry code: 17531316
Address: Mäeküla 7-7, 13525 Tallinn, Harju County
Email: info@eknord.ee
Phone: +372 5670 8332
For questions related to privacy and the processing of personal data, please contact us by email.
2. What Personal Data Do We Collect?
We may collect the following personal data:
• name;
• email address;
• phone number;
• content of the enquiry or message;
• project-related information, measurements, photos and files;
• information related to the materials and solutions selected by the client;
• technical data related to website use, such as IP address, browser, device and website log data;
• data collected through cookies, if the visitor has consented to their use.
We collect data mainly when a person fills in a contact form, sends us an email, calls us or starts communication with us regarding a furniture project.
3. Purposes and Legal Bases for Processing Personal Data
We process personal data for the following purposes.
Responding to Enquiries and Preparing Quotations
We use the name, email address, phone number and content of the enquiry in order to:
• answer the client’s questions;
• clarify the project requirements;
• arrange a consultation or measurement visit;
• prepare a quotation;
• take preparatory steps for entering into a contract at the client’s request.
The legal basis for such processing is taking pre-contractual steps at the request of the client or performing a contract under Article 6(1)(b) of the GDPR.
Carrying Out Orders and Furniture Projects
We use the client’s data for planning, coordinating, manufacturing, transporting and installing the project, as well as for resolving later warranty or maintenance matters.
The legal basis for such processing is the performance of a contract.
Website Functionality and Security
We may process technical data to ensure the reliability and security of the website, detect errors and prevent malicious use.
The legal basis for such processing is our legitimate interest in keeping the website secure and functional.
Compliance with Legal Obligations
We process data to the extent necessary to comply with accounting, tax or other legal obligations.
Marketing
We send newsletters or other marketing communications only if the person has given separate voluntary consent for this. Marketing consent can be withdrawn at any time.
There must always be an appropriate legal basis for processing personal data, and consent given for one purpose must not be used for another purpose, such as sending advertising.
4. To Whom May We Disclose Data?
We may use service providers who help us operate the website and manage the company’s activities, for example:
• web hosting and server service providers;
• email service providers;
• contact form and website software providers;
• IT maintenance and technical support providers;
• accounting service providers;
• cooperation partners and subcontractors involved in carrying out projects;
• transport and installation service providers;
• public authorities, if disclosure of data is required by law.
Data is disclosed to service providers only to the extent necessary for providing the relevant service.
We do not sell or disclose clients’ personal data to independent third parties for marketing purposes.
5. Transfer of Data Outside the European Economic Area
If the website uses services whose provider may process data outside the European Economic Area, data is transferred only in accordance with applicable data protection requirements and appropriate safeguards.
This section is particularly relevant if the website uses services such as Google Analytics, Google reCAPTCHA, YouTube, Meta Pixel or other international services.
6. How Long Do We Keep Data?
We keep personal data only for as long as necessary to fulfil the purpose for which it was collected.
Recommended retention periods:
• enquiries that do not result in an order: up to 24 months after the last communication;
• project- and contract-related communication: during the term of the contract and afterwards for the period required by law or for the establishment, exercise or defence of potential claims;
• accounting documents: for the period required by law;
• marketing data: until consent is withdrawn;
• website technical logs: up to [insert actual retention period].
When data is no longer needed, it is deleted or anonymised.
7. Cookies
The website may use cookies.
Essential cookies ensure the basic functionality and security of the website. Analytical and marketing cookies are used only after the website visitor has given prior consent.
Visitors must have the option to refuse non-essential cookies and to withdraw their consent later just as easily. The Estonian Data Protection Inspectorate has stated that analytical and advertising cookies generally require prior voluntary consent.
More detailed information about the cookies used on the website, their purpose, service provider and retention period is displayed in the cookie settings window.
8. Your Rights
Subject to applicable conditions, a person has the right to:
• receive information about the processing of their personal data;
• request access to their data;
• request correction of inaccurate data;
• request deletion of data;
• request restriction of processing;
• object to processing;
• receive the data they have provided in a machine-readable format and transmit it to another service provider;
• withdraw consent at any time;
• lodge a complaint with the Estonian Data Protection Inspectorate.
The Estonian Data Protection Inspectorate emphasises that the data controller must explain the basis on which data is used and how a person can request correction or deletion of their data.
To exercise your rights, please send a request to raul@eknord.ee. Before fulfilling the request, we may ask you to confirm your identity if necessary.
9. Data Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
Access to personal data is granted only to those persons and service providers who need it to perform their duties.
10. Automated Decisions
We do not make automated decisions or carry out profiling based on personal data collected through the website that would produce legal or similarly significant effects for a person.
11. Changes to the Privacy Policy
We may update this Privacy Policy if our services, technical solutions or legal requirements change.
The current Privacy Policy is always published on the website together with the date of the last update.