Privacy policy | Finntrail Online Shop

PRIVACY POLICY

Last Updated: 01.09.2026

Data Controller

This website is operated by FT Distributing OÜ, registry code: 16723054, registered address:
Ida-Viru maakond, Narva linn, P. Kerese tn 3, 20309 (hereinafter referred to as "FINNTRAIL", "we", "us", or "our").

FINNTRAIL respects your privacy and processes personal data in strict accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

This website is an online catalogue. It does not process purchases, payments, shipping, or returns, and does not by itself create sales contracts

By using finntrail.com (the “Site”), you acknowledge this Privacy Policy.

1. What Data We Collect

We collect personal data only when you voluntarily provide it via forms or direct communication (e.g., email).

This may include:

• Name, Surname

• Email address

• Phone number

• Any information you include in your message

We do not collect payment or transaction data. We do not intentionally collect personal data from third parties without authorization. We do not collect or process special categories of personal data (e.g., health, biometric, racial, ethnic, or political data).

2. How We Use Your Data

We use your data strictly for the following purposes:

• Responding to your inquiries and requests

• Communicating with you regarding your submissions

• Providing informational details about our products

• Improving our website functionality and services

• Sending marketing communications only were permitted by law or with your explicit consent

Submitting information through website forms does not create a contract, order, or obligation to purchase.

3. Legal Basis for Processing

We process personal data based on the following lawful grounds (GDPR Art. 6):

• Your explicit consent (e.g., contact forms, newsletter subscriptions)

• Legitimate interests (e.g., responding to inquiries, maintaining website security, improving services, and direct marketing to existing business contacts were permitted by law, subject to your right to object)

• Legal obligations where applicable under Estonian or EU law

4. Marketing Communications

We may send marketing emails only were permitted by the Estonian Advertising Act and the GDPR, or with your explicit prior consent.

You can unsubscribe at any time via the link provided in the emails or by contacting us directly at sales@finntrail.com.

5. Cookies

We use cookies to:

• Ensure essential website functionality

• Analyze usage patterns

• Improve overall performance

• Where required by the ePrivacy Directive and GDPR, non-essential cookies (e.g., analytics, marketing) are deployed only after obtaining your explicit consent via our cookie banner.

6. Sharing Your Data

We do not sell personal data. We may share data only with:

• Trusted service providers (e.g., hosting, analytics, communication tools) acting as data processors

• Companies within our corporate group

• Government or regulatory authorities where strictly required by law

All third parties may only process data on our documented instructions and for defined purposes. If any of our service providers are located outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs), to protect your data in compliance with Chapter V of the GDPR.

7. Data Storage and Security

Your data is stored on secure servers with appropriate technical and organizational safeguards (e.g., encryption, access controls). However, no digital transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected. For example, inquiry and communication data is generally retained for up to 3 years after our last interaction to comply with legal obligations and resolve potential disputes, unless a longer retention period is explicitly required by Estonian law (e.g., accounting or tax regulations).

9. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion of your data ("right to be forgotten")

• Restrict or object to processing

• Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)

• Request data portability in a structured, commonly used format

• Lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Estonia, this is the Data Protection Inspectorate (Andmekaitse Inspektsioon) (www.aki.ee).

To exercise these rights, please contact us at sales@finntrail.com. We will respond within one month, as required by law.

10. Children’s Data

This website is not intended for children under the age of digital consent (which is 13 years old in Estonia, per the Estonian Personal Data Protection Act § 8). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take immediate steps to delete it.

11. Third-Party Services

The website may include third-party tools, plugins, or links. Their data practices are governed by their own privacy policies, and we encourage you to review them before interacting with these services.

12. Contact

For privacy-related requests, questions, or to exercise your data subject rights, please contact us at:

Email: sales@finntrail.com