EfTEN Kristiine OÜ (Kristiine Keskus) respects your privacy and protects your personal data. Personal data includes all information that can be used to identify an individual (name, address, etc.). This privacy notice (hereinafter "Privacy Notice") describes how and what personal data Kristiine Keskus collects and processes in connection with consumer marketing, and how the security of the collected data is ensured during processing.
We value your trust in how we handle your personal data (we do not sell or share your personal data with third parties in any way that would conflict with this Privacy Notice). If you have any questions, please don’t hesitate to contact us.
EfTEN Kristiine OÜ (registry code 17116468) is responsible for the processing of personal data related to Kristiine Keskus.
Customer List for Consumer Marketing
We collect your data if you:
- subscribe to our newsletter;
- respond to our customer surveys;
- participate in contests and sweepstakes organized by us;
- provide us with feedback (e.g. through a form on our website);
- visit our shopping centers or business buildings or
- contact us in any other way.
Other Sources of Data Collection:
We also process data from other sources that can be linked to your personal data, such as:
- information available on social networks (Facebook, LinkedIn, Instagram).
Accessing data from third-party registers and systems requires that the third party has permission to share such data about you. Additionally, personal data is collected and updated from public sources and authorities or from third parties, for purposes defined in the privacy policy and allowed by applicable laws. This data is updated manually or automatically.
When visiting our websites, we collect information about your device (computer or phone) using cookies and similar technologies like pixel tags, which store data in the browser or on the device itself.
Like many other companies, Kristiine Keskus uses cookies and similar technologies on its website to store usage information to improve usability, provide the best user experience, build user profiles, and run targeted marketing.
Cookies are small text files uploaded to the user’s device by the web server. They gather information about website usage patterns, visit times, and user interests on other websites.
Other tracking technologies used include pixel tracking (e.g. pixel tags), Flash cookies (local shared objects), HTML5 local storage, device and operating system identifiers, transparent GIFs, and web beacons.
If you no longer wish to receive cookies while browsing, you can adjust your cookie preferences under the "Cookie Policy" section in the website footer. Note that disabling cookies may result in some website functions or services not working properly.
Contact information:
We process your contact details, such as your first name and email address, to send newsletters.
Device-related information:
To offer the best service and support for your device, we collect your device's IP address, language preference, browser type, operating system, and screen resolution. We also gather data about how and when you use the website.
Customer survey data:
We may occasionally contact you for voluntary participation in surveys. If you agree, we will process the personal data collected during the survey.
Your communications with Kristiine Keskus:
This includes emails or other messages you send to us. We may collect and process the reason for contact, the date and time, your contact information, and other details necessary to help you or resolve your case.
Communication with you:
We process your personal data to communicate with you effectively, if necessary.
Customer surveys:
Your contact data may be used to invite you to surveys to gather feedback on our shopping centre. Participation is voluntary. The data is used to improve our services, based on our legitimate interest.
Statistical analysis:
We use your data to compile aggregate statistics. These statistics do not identify you personally and are used to develop and improve our services (based on legitimate interest).
Marketing of Kristiine Keskus:
Based on our legitimate interest in marketing, we may use marketing technologies to send newsletters.
Protection of Kristiine Keskus and others:
We may process your data to protect or enforce the rights and interests of Kristiine Keskus, you, or third parties, e.g. in legal proceedings.
Business transfer:
If Kristiine Keskus decides to sell or transfer part or all of its business or shopping centers, your personal data may be shared with transaction participants. This is based on our legitimate interest in business development.
With your consent only:
We may use your personal data for specific purposes not mentioned above, but only with your explicit consent. For example, we may publish your testimonials or include you in articles about Kristiine Keskus. You can withdraw your consent at any time.
In some cases, Kristiine Keskus shares your personal data with trusted entities:
Service Providers:
We share your data with selected companies that help us provide services, including servers, mailing, marketing, and analytics. These providers may process your data according to our instructions or to meet legal obligations. All providers have been carefully vetted to ensure data protection.
Authorities and Legal Requirements:
We may be required to share your data with public authorities, courts, or third parties (e.g. in legal proceedings or to comply with regulatory requirements).
Transfers Outside the EU/EEA:
If data is transferred outside the EU/EEA, we ensure adequate protection through either adequacy decisions or by using the European Commission's Standard Contractual Clauses, along with necessary additional safeguards.
Your personal data may be transferred without consent if required by law or in emergency situations where vital interests are at stake. In case of a business acquisition, data may be transferred to new owners of the shopping centre. You will be notified once the transaction is complete.
Kristiine Keskus follows good governance, due diligence, and data protection practices to ensure your privacy at every stage of processing. We always assess whether the processing is appropriate, justified, and necessary. We do not process data beyond what is needed. Where possible, we anonymize data that is no longer needed for identification purposes.
All partners handling personal data follow strict security protocols to protect data from unauthorized access, destruction, alteration, or illegal processing. Only authorized employees and partners have access based on their job responsibilities. Our systems are protected through access restrictions and passwords granted only after strict verification.
Retention Period:
Your data is retained only as long as we have your consent or a legitimate reason. After that, it is deleted or anonymized. The retention period depends on the data type and legal requirements.
Personal data processed based on your consent will be deleted once you withdraw it or it is anonymized. Some data may be retained longer if required by law, in which case it will be used solely to fulfill legal obligations.
We ensure that outdated or incorrect data is promptly corrected or deleted.
You have the right to access your personal data in our customer list and systems, and to request correction or deletion of inaccurate, outdated, unnecessary, or unlawfully processed data.
If your data is processed based on your consent, you can withdraw or modify that consent at any time. Withdrawal does not affect processing done before the withdrawal. To withdraw consent, email us at info@kristiinekeskus.ee.
You have the right to request your data and transfer it to another data controller, if the data was provided by you and is processed automatically based on your consent.
You may file a complaint with the Data Protection Authority (Data Protection Inspectorate) if you believe your personal data has been misused. More info at: www.aki.ee/en. You can also contact the supervisory authority in your country of residence or employment.
You have the right to object to data processing based on legitimate interest for personal reasons. If you object, you must explain the specific personal situation that justifies your objection. We may deny your request only on legal grounds.