Privacy policy

PANNELTAC OÜ
Registration no.: 16343481
Address: Kase 12, Lähte alevik, Tartu vald, Estonia
Email: panneltac@gmail.com
Last updated: August 10, 2026

1. Introduction

This Privacy Policy explains how PANNELTAC OÜ processes personal data collected through the webshop at www.panneltac.com. We process data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

2. What Data We Collect

When you place an order, contact us, or subscribe to our newsletter, we may collect the following personal data:

  • Full name

  • Email address

  • Phone number

  • Shipping and billing address

  • Order and product details

  • Payment method used (e.g. PayPal, Shopify Payments — no full card or account details are stored)

We also collect anonymized usage data via cookies and analytics tools (e.g. Google Analytics) to improve website performance. See Section 7 for details on cookies and how you can control them.

3. Purpose and Legal Basis

We collect and process personal data for the following purposes:

Purpose Legal Basis (GDPR)
To process and deliver your order Article 6(1)(b) – Contractual necessity
To contact you about your order Article 6(1)(b)
To comply with legal obligations (e.g. accounting) Article 6(1)(c)
To send newsletter updates, if you subscribed Article 6(1)(a) – Consent
To improve website functionality (analytics) Article 6(1)(a) – Consent, given via our cookie consent banner

4. Newsletter

If you subscribe to our newsletter, we use your email address to send you updates about new products, releases, and news. This processing is based on your consent (Article 6(1)(a) GDPR). You can withdraw your consent and unsubscribe at any time using the link included in every newsletter email, or by contacting us at panneltac@gmail.com. We retain newsletter subscriber data for as long as you remain subscribed, and delete it within a reasonable period after you unsubscribe.

5. Data Sharing

We do not sell your personal data or disclose it to unrelated third parties. We share personal data only with service providers (processors) who help us operate the webshop, including:

  • Shopify — our e-commerce platform, which hosts the webshop and processes order data on our behalf

  • Shipping providers (e.g. Omniva)

  • Payment processors (e.g. PayPal, Shopify Payments, Maksekeskus AS)

  • Product review platform (Junip), which processes order and email data to invite and display customer reviews

  • Google Analytics, used only with your cookie consent, to understand website usage

These providers may process data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure your data remains protected.

6. Data Retention

We retain your personal data only as long as necessary:

  • Order and billing data: kept for 7 years to comply with accounting laws

  • Contact and communication data: up to 2 years, unless required longer for legal purposes

  • Newsletter subscriber data: for as long as you remain subscribed, per Section 4

  • Cookies: stored according to your consent choices and the cookie type, see Section 7

7. Cookies and Tracking

When you first visit our site, you are shown a cookie consent banner. Essential cookies, required for core site functionality such as checkout, are set automatically. Non-essential cookies, such as those used for analytics, are only set if you give your consent through the banner. You can change or withdraw your cookie preferences at any time.

We do not currently use any advertising or remarketing tracking pixels (such as Meta Pixel, TikTok Pixel, or Google Ads remarketing). If this changes in the future, this policy and our cookie consent banner will be updated accordingly.

8. Your Rights

You have the right to:

  • Request access to your personal data

  • Request correction or deletion of your data

  • Object to or restrict processing

  • Withdraw consent at any time (e.g. newsletter subscription or analytics cookies), without affecting the lawfulness of processing before withdrawal

  • Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

To exercise your rights, email: panneltac@gmail.com

9. Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available at www.panneltac.com.