Privacy Policy

This Privacy Policy sets out the principles governing the collection, processing and storage of personal data. Personal data is collected, processed and stored by Ada Johanna OÜ, registry code 16451383, address Hariduse 12-16, Viljandi 71011, Estonia, acting as the data controller (hereinafter the Controller).

Contact details
Email: info@adajohanna.ee
Telephone: +372 5344 4903

We process data, including personal data such as the customer’s or their representative’s first and last name, delivery address, email address and telephone number (hereinafter the Data), in the following circumstances:

  1. when an order is placed, for the purpose of processing and fulfilling the order;
  2. where necessary to comply with obligations arising from applicable law.

As a general rule, we collect personal data directly from the data subject.

We also use cookies to optimise the user experience on our website and to provide customers with a better service.

Personal data is processed on the applicable legal bases provided for by data protection legislation, including the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

By providing personal data when purchasing goods through the website, the data subject enables the Controller to collect, organise, use and otherwise process such personal data for the purposes described in this Privacy Policy.

The Controller is not responsible for damage suffered by the data subject or third parties as a result of incorrect information provided by the data subject.

Data Controller and Processors

The data controller is:

Ada Johanna OÜ
Registry code: 16451383
Address: Hariduse 12-16, Viljandi 71011, Estonia

The Controller may disclose personal data to authorised processors where this is necessary for the provision of services or fulfilment of contractual or legal obligations. Such processors may include, for example, website service providers, accounting service providers, transport and courier companies, payment service providers, SMS service providers and hosting service providers.

The Controller transfers personal data necessary for processing payments to the authorised processor Maksekeskus AS.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above, protect our legal rights or comply with obligations arising from applicable law.

Protection of Personal Data

We aim to prevent unauthorised processing, access or disclosure of personal data. For this purpose, we apply appropriate organisational, physical and information technology security measures and limit access to personal data according to necessity.

Persons processing personal data on behalf of the Controller are required to comply with applicable data protection requirements.

Rights of the Data Subject

The data subject has the right:

  • to obtain information about what personal data we process and how it is processed;
  • to withdraw consent at any time where processing is based on consent;
  • to request the erasure of personal data where the applicable legal requirements for erasure are met;
  • to request the rectification of inaccurate or incomplete personal data;
  • to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to seek judicial protection.