Effective from: 22.07.2026
1. Data controller
The controller of personal data processed in the online store is Osaühing MÖÖBLIEXPERT GRUPP, registry code 11129866, address Narva mnt 40, Jõhvi, 41536, Estonia, email info@moobliexpert.ee, telephone +372 554 6183.
2. Data we process
Identity and contact data: name, email, telephone number, delivery address and billing address.
Company data: business name, registry code, VAT number, contact person and customer group.
Order and contract data: purchased products, prices, delivery method, payment status, invoices, returns and correspondence.
Account data: username, account preferences and order history.
Technical data: IP address, device and browser information, logs and cookie choices.
Customer-support data: enquiries, messages, attachments and the course of resolution.
Marketing data: newsletter consent, the time it was given and withdrawn, and campaign-use statistics where consent exists.
3. Purposes and legal bases
| Purpose | Legal basis |
| Receiving orders, payment, delivery, returns and customer support | Entering into and performing a contract |
| Retention of invoices and accounting records | Compliance with a legal obligation |
| Fraud prevention, IT security and protection of legal rights | Legitimate interests |
| Managing user accounts and applying agreed B2B pricing | Contract performance and legitimate interests |
| Sending newsletters and direct marketing | Consent, or the legally permitted existing-customer basis with an opt-out |
| Use of non-essential analytics and marketing cookies | Consent |
4. Sources of data
We obtain data mainly from the customer through the online store, account, payment process, contact form, email or telephone. During order fulfilment, data and status information may move between the online store, payment-service provider, delivery partner and business software.
5. Recipients of data
We disclose data only to the extent necessary to provide the service or comply with a legal obligation. Recipients may include:
- The payment-service provider activated at checkout, including Montonio if used.
- DPD and other carriers selected by the customer.
- Excellent business software and providers maintaining the integration between the online store and business software.
- Web-hosting, email, IT-maintenance and cybersecurity providers.
- Accounting, legal and audit service providers.
- Newsletter and analytics services only where an appropriate legal basis exists.
- Public authorities where disclosure is required by law.
6. Retention
We retain data only for as long as necessary for the processing purpose or compliance with legal obligations. Source accounting documents are generally retained for seven years. Order and customer-relationship data may be retained for the limitation period applicable to establishing and defending claims. Newsletter data is retained until consent is withdrawn or the marketing relationship ends. Exact retention periods for technical logs and contact enquiries are established in the company’s internal retention schedule.
7. International transfers
We prefer providers that process data in the European Economic Area. If a provider processes data outside the EEA, we use applicable legal safeguards, such as a European Commission adequacy decision or standard contractual clauses.
8. Rights of the data subject
Within the limits of applicable law, a person may request access to their data, correction of inaccurate data, erasure or restriction of processing, object to processing based on legitimate interests, receive data they supplied in a machine-readable format, and withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To submit a request, email info@moobliexpert.ee. We may request additional information to verify identity. If you believe your data has been processed unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee/en).
9. Security
We apply appropriate technical and organisational measures, including access controls, protection of connections, backups, system updates and service-provider oversight. No electronic system is completely risk-free.
10. Automated decisions
The online store may automatically apply the price group assigned to a customer account and display prices accordingly. Its purpose is to implement agreed customer pricing and it is not generally a decision producing significant legal effects for an individual. If other profiling or automated decisions are introduced, separate information will be provided.
11. Changes
The Privacy Policy may be updated when services, technical solutions or legal requirements change. The current version will be published in the online store with its effective date.