top of page



The personal data controller of the website is Tulipunane OÜ (registry code
10560579) located at 6-1 Kotkapoja street, Kuressaare town, Saaremaa municipality, Saare county 93810, phone (+372 53460035) and e-mail


What personal data is processed:

−  name, phone number and e-mail address published by the user;

− data entered by the user during account registration, data on the use of the e-channel, its services and functions, and data collected using cookies.

−  customer support data.


For what purpose are personal data processed:

  • to communicate with customers,

  • To market the products and services of Tulipunane OÜ (including targeted e-mail marketing, online advertising and personal sales calls), to collect and handle feedback, to provide requested information

  • To offer products and services purchased or ordered from Tulipunane OÜ.


In addition, Tulipunane OÜ may share your online behavior data, such as site visits and email clicks, with channel partners for the purpose of selling and marketing Tulipunane OÜ products and services.


Users may be targeted if they use third-party service providers (such as Google). Marketing based on user lists uses lists created by user cookies on this website. The advertising policy established for marketing is based on user lists, including Google Inc. interest-based advertising policy, the latest version of which can be found at The User may choose to engage in marketing based on the user lists provided on the Your Online Choices website: Google marketing advertising provisions can be found at: ads/preferences



Site Analytics

This website uses site analytics - eg Google Analytics, which is Google Inc. web analytics service. Site analytics uses cookies (text files) to analyze website traffic. Information generated by cookies (e.g. IP addresses) is transmitted and stored by the service provider. Service providers use this information to prepare reports for website owners and provide other services related to website activity and internet usage.

Service providers may transfer data to third parties if this is required by law or if a third party processes this information on their behalf.

The service providers do not associate your IP address with any other data in their possession. You can block cookies in your browser settings, but this will reduce the functionality of the website.

By using and navigating this site, you authorize the site analytics service provider to process personal data in accordance with this policy and for the purposes described therein.



The cookies used on this website do not violate the privacy of the service user. Cookies are used, for example, to measure the use of the website and to determine the type and volume. Cookies may also be used for direct marketing to businesses or for marketing to user lists. The purpose of such marketing is to provide company service information to users who have previously visited the company's website. We do not collect user personal information such as email addresses, phone numbers or credit card numbers.


Cookies do not provide access to a data storage device and do not provide the ability to copy the contents of a data storage device such as a hard drive. The user can block cookies by changing the Internet browser settings; however, this may reduce the functionality of the website and is not recommended. The user can delete cookies from the Internet browser at any time.


Legal basis

Personal data is processed for the purpose of fulfilling the contract concluded with the customer.

Personal data is processed to fulfill a legal obligation (e.g. accounting and consumer dispute resolution).

Data processing takes place with the customer's consent to perform the following activities: delivery of the newsletter, notification of the discount campaign.


Security and data access

Personal data is stored on servers, which are located on the territory of a member state of the European Union or countries that have joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to US companies that have joined the Privacy Shield framework.

Website employees have access to personal data, who can access personal data in order to solve technical issues related to the use of the website and to provide customer support services. The online store implements appropriate physical, organizational and IT security measures to protect personal data from accidental or illegal destruction, loss, modification or unauthorized access and disclosure.

Transfer of personal data to authorized processors of the website (e.g. service provider and data hosting) takes place on the basis of contracts concluded with the website and authorized processors. Authorized processors are obliged to ensure appropriate protection measures when processing personal data.


Viewing and correcting personal data

Personal data can be consulted through customer support:


Withdrawal of consent

If the processing of personal data takes place on the basis of the customer's consent, the customer has the right to withdraw the consent by notifying the customer support by e-mail.



Personal data necessary for accounting is stored for seven (7) years.



To delete personal data, you must contact customer support by e-mail. The deletion request will be answered no later than within a month, and the data deletion period will be specified.



The request for the transfer of personal data submitted by e-mail will be answered within a month at the latest. Customer support identifies the identity and informs about the personal data that is subject to transfer.


Direct marketing messages

The e-mail address and phone number are used to send direct marketing messages if the customer has given their consent. If the customer does not wish to receive direct marketing messages, he must select the corresponding reference in the footer of the e-mail or contact customer support.


If personal data is processed for the purpose of direct marketing (profiling), the customer has the right to object to the initial and further processing of his personal data, including profile analysis related to direct marketing, at any time by notifying customer support by e-mail.


Solving arguments

Disputes related to the processing of personal data are resolved through customer support ( The supervisory authority is the Estonian Data Protection Inspectorate (

bottom of page