Wishlist Cart

Language

Free delivery in Tartu from €15 (Mon–Sat). Fast delivery across Estonia in 1–3 business days.

Categories

  • Privacy Policy

    Naerupaun respects the privacy of its customers and processes personal data in accordance with applicable data protection legislation.

    The controller of personal data processed through the naerupaun.eu online store is Lamellpuit OÜ.

    The technical e-commerce platform is provided by Roller Äritarkvara OÜ (ShopRoller), which may process personal data on behalf of and under the instructions of Lamellpuit OÜ.

    What personal data do we process?

    Depending on how you use our online store, we may process the following personal data:

    • name;
    • telephone number and email address;
    • billing and delivery address;
    • order and purchase history;
    • payment-related information;
    • communications with customer service;
    • customer account information;
    • IP address and other technical information relating to the use of the online store;
    • information relating to consents and marketing preferences.

    Where payment is made through a payment service provider, Naerupaun does not process the customer's full payment card details.

    Why do we process personal data?

    Processing and fulfilling orders

    We use personal data to receive and process orders, manage payments, prepare and deliver goods, and communicate with customers regarding their orders.

    The legal basis for this processing is the performance of a contract with the customer or taking steps at the customer's request prior to entering into a contract.

    Accounting and legal obligations

    We process and retain information required by law for accounting, taxation, handling consumer complaints and fulfilling other legal obligations.

    The legal basis for this processing is compliance with a legal obligation.

    Customer service

    We use the customer's name, contact details, order information and communications with customer service to answer questions and handle orders, returns and complaints.

    Operation and security of the online store

    We may process IP addresses and other technical information to ensure the operation and security of the online store, resolve technical issues and prevent misuse.

    Analysis and development of the online store

    With the user's consent, we may collect statistical information about the use of the online store to understand how it is used and to improve its content, usability and functionality.

    Where cookies or similar technologies requiring consent are used for this purpose, they will only be used after the relevant consent has been given.

    Further information is available in our Cookie Policy.

    Direct marketing

    We send newsletters and other electronic marketing communications where you have given your consent or where another legal basis provided by law applies.

    You can opt out of marketing communications at any time by using the unsubscribe option provided in the message or by contacting us.

    Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

    Who may receive your personal data?

    We disclose personal data only to the extent necessary to fulfil orders, operate the online store or comply with legal obligations.

    Recipients may include:

    • e-commerce platform and IT service providers;
    • payment service providers;
    • banks and payment solution providers;
    • postal, parcel locker and courier service providers selected by the customer;
    • accounting and business software service providers;
    • web hosting and other technical service providers;
    • marketing and analytics service providers, where the user has given the relevant consent;
    • public authorities where disclosure is required by law.

    We provide delivery service providers with the information necessary to deliver the goods, such as the customer's name, telephone number and email address. Where courier delivery is used, the delivery address will also be provided where necessary.

    Service providers receive only the personal data necessary to provide their respective services.

    Security of personal data

    We apply appropriate organisational and technical security measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

    Personal data may only be accessed by persons and service providers who require access to perform their duties or provide their services.

    How long do we retain personal data?

    We retain personal data only for as long as necessary for the purpose for which it was collected or to comply with legal obligations.

    Personal data contained in accounting records is retained for the period required by law, generally seven years.

    Information relating to orders, returns, complaints and potential claims may be retained until the applicable limitation periods have expired.

    Customer account information is retained while the account remains in use. When an account is closed, information for which there is no further legal basis for retention will be deleted.

    Where personal data is processed on the basis of consent, it will generally be retained until consent is withdrawn or the purpose of the processing ceases, unless another legal basis requires or permits continued retention.

    Your rights

    You have the right to:

    • receive information about the processing of your personal data;
    • access the personal data we process about you;
    • request correction of inaccurate or incomplete personal data;
    • request deletion of personal data where provided by law;
    • request restriction of processing where provided by law;
    • receive, where provided by law, personal data you have provided to us in a structured, commonly used and machine-readable format and have that data transmitted to another controller;
    • object to the processing of your personal data where provided by law;
    • withdraw your consent to the processing of personal data at any time;
    • object at any time to the use of your personal data for direct marketing.

    The right to erasure does not require us to delete information that we are legally required to retain.

    Accessing, correcting and deleting your data

    If you have a Naerupaun customer account, you can view and modify some of your personal data through your account.

    For other requests, please contact us. Where necessary, we may request additional information to verify your identity before providing, correcting or deleting personal data.

    We generally respond to data protection requests within one month. Where permitted by law, this period may be extended for complex or numerous requests.

    Transfers outside the European Economic Area

    Some of the IT, analytics, marketing or other service providers we use may process personal data outside the European Economic Area.

    Where this occurs, personal data will be transferred using an appropriate legal basis and safeguards required by applicable data protection legislation.

    Cookies

    The Naerupaun online store uses cookies that are necessary for the operation of the website and, with the user's consent, other types of cookies.

    Further information about the use of cookies and how to change your preferences is available in our Cookie Policy and in the online store's cookie consent settings.

    Questions and complaints

    For questions, requests or objections concerning the processing of personal data, please contact:

    Lamellpuit OÜ
    Naerupaun
    Email: info@lamellpuit.ee

    If you believe that your personal data has been processed in breach of applicable data protection legislation, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

    Lamellpuit OÜ

    26.08.2026