Data controller
A-SCAPE OÜ (registry code 17152547), address Heki tee 8-30, Haabneeme, Viimsi vald, Harju maakond, 74001, Eesti, email info@ascape.ee, website www.ascape.ee.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable laws of the Republic of Estonia.
What data we collect
- Contact details: first and last name, email, phone
- Shipping address: street, city, postal code, country
- Order data: products purchased, quantities, amounts
- Order source: where you came to our site from (referring website, advertising campaign), without identifiers; we store it with the order for our order records
- Account data: information provided when registering (if you create an account)
- E-mail consent: whether and when you agreed at checkout to cart reminders and feedback requests, in which language and with which wording
- Reviews: rating, text and the name you choose, linked to the order and the product (if you leave a review)
- Technical data: IP address, browser type (log files)
Why and on what basis we process data
- Processing orders, payments, delivery and order e-mails — performance of the contract (GDPR art. 6(1)(b))
- Maintaining your customer account — performance of the contract (art. 6(1)(b))
- Accounting and taxes — legal obligation (art. 6(1)(c))
- Website usage statistics (Google Analytics 4), advertising measurement and remarketing (Google Ads) — your consent (art. 6(1)(a)); you can withdraw consent at any time
- Reminders about items left in your cart and a request for feedback (a review) after delivery, by e-mail — only with your consent, which you can give at checkout (art. 6(1)(a)). Consent is valid for 12 months; you can unsubscribe via the link in every such e-mail or by writing to info@ascape.ee. After you unsubscribe we keep a hash of your e-mail address instead of the address itself, so that these e-mails are not sent to you again
- Reviews — if you leave a review through the link in our e-mail, we publish the rating, the text and the name you choose on the product page after checking it; your e-mail address is not stored with the review. Basis: your consent, given by sending the review (art. 6(1)(a)); to have a review removed, write to info@ascape.ee
- Abuse and bot protection (Cloudflare Turnstile), technical logs — our legitimate interest (art. 6(1)(f))
- Customer service and answering enquiries — legitimate interest or performance of the contract, depending on the enquiry
- “Notify me” and “Need it soon?” requests on a product page (e-mail, optionally name and phone) — to answer the request and send one notice when the item can be ordered again; basis: your consent (art. 6(1)(a)), which you can withdraw at any time; deleted 6 months after the request is closed
How long we retain data
- Order data: 3 years after the order is fulfilled
- Accounting documents: 7 years (legal requirement)
- Customer account without orders: kept for up to 24 months from your last login or order, after which we may delete it; you can ask us to delete it at any time
- Cookies and similar technologies: see the cookie policy
- Technical logs: only as long as needed for security and troubleshooting
Your rights
- Right to access your data and to receive a copy
- Right to rectify your data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing and to object to it
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with the Data Protection Inspectorate (aki.ee)
Data requests
To exercise your rights, email info@ascape.ee. We respond within one month of receiving your request.