Privacy Policy

Last updated: 05.04.2026

General Information

BAHUS OÜ (reg. code 14316592), located at Pärnu mnt 36 / Roosikrantsi 23, Tallinn, is the data controller for the processing of your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. By using the services of our online store Maitsev Tallinn, you agree to the data processing terms described in this privacy policy.

What data we collect

We collect only the personal data necessary to fulfil your order and provide our service: name, email address, phone number, delivery address, and payment data (processed via the Montonio platform — we do not store bank details in our systems). When purchasing alcohol, age verification is performed based on an identity document at the time of delivery.

Purpose of data processing

Your personal data is processed for the following purposes: order processing and fulfilment, arranging delivery services (courier, parcel machines), processing payment transactions via Montonio, customer support and handling complaints, verifying age for compliance with alcohol sales regulations, and meeting legal obligations. The legal basis for data processing is the performance of a contract (GDPR art 6(1)(b)) and a legal obligation (GDPR art 6(1)(c)).

Sharing data with third parties

We share your personal data with third parties only to the extent necessary to fulfil your order: courier companies for delivery within Tallinn, parcel machine operators (Omniva, DPD, Itella) for delivery across Estonia, Montonio OÜ for processing payment transactions. We do not sell or rent your personal data to third parties for marketing purposes.

Data retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, but no longer than 3 years after your last order. Accounting records are retained for 7 years in accordance with Estonian accounting law.

Your rights

Under GDPR, you have the following rights regarding your personal data: the right to be informed about the processing of your data, the right of access to your data, the right to rectification, the right to erasure ("right to be forgotten"), the right to restriction of processing, the right to data portability, and the right to object to processing. To exercise your rights, please contact us at [email protected].

Cookies

Our website uses cookies to ensure the proper functioning of the website and to improve user experience. Cookies are used for shopping cart functionality and session management. We do not use third-party analytics or advertising cookies.

Security

We implement appropriate technical and organisational measures to protect your personal data. All data transmissions are protected by SSL encryption. Payment data is processed exclusively on Montonio's secure platform. Access to personal data is restricted to employees who need it to perform their duties.

Filing complaints

If you have questions or complaints regarding the processing of personal data, please first contact us at [email protected]. We respond within 5 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

Changes to this Privacy Policy

We reserve the right to amend this privacy policy at any time. In the event of significant changes, we will notify you by email or by publishing a notice on our website. The updated policy takes effect from the moment it is published on the website.

Contact