Data protection policy

Maag Eesti AS (Maag Eesti) may come into contact with your personal data as a natural person (data subject) in its activities.
Maag Eesti can primarily be the processor of your personal data if you have contacted Maag Eesti by mail, purchased products directly from Maag Eesti or participated in the Maag Eesti consumer game.
In this case Maag Eesti will be the controller of your personal data, who will ensure the reliability and security of your personal data processing and will ensure that your personal data is collected and processed only to the extent necessary and for the established purpose.

Transfer of personal data
When processing personal data, Maag Eesti may also transfer these to third parties, e.g. (i) authorities and other persons authorized by law, (ii) processors acting on behalf of Maag Eesti, (iii) other persons providing Maag Eesti services (e.g. postal, logistics, collection service providers).

Retention of personal data
Maag Eesti does not process, including does not store, personal data longer than it is necessary to fulfil the purposes of processing such data, including to fulfil the obligation to store data stipulated in legislation and to protect its own rights to resolve a dispute (or possible dispute). More detailed personal data retention periods may also be specified below for each situation.

The more specific circumstances regarding the main situations of personal data processing, including the purpose and legal basis of processing, have been provided below.

Written inquiry
If you have turned to Maag Eesti in writing, Maag Eesti will process your personal data (name and contact details) in order to respond to your inquiry. For this purpose, it may be necessary to provide your name and contact details to e.g. the postal service provider.

Participating in the consumer game
When participating in a consumer game organized by Maag Eesti, Maag Eesti processes your personal data for conducting a specific game, including the delivery of prizes. Maag Eesti only processes your basic data (e.g. name, personal identification code, date of birth) and contact data (e.g. phone number, e-mail, address) that you have provided to us to participate in the game or to have the prize delivered.
When conducting a consumer game, Maag Eesti may transfer the player’s personal data, including:
to a marketing company helping to organize the game;
to respond to a request to a postal service provider or to deliver a prize;
due to the rules of the game, the name of the winner may be disclosed.
In case of the consumer games organized by Maag Estonia, the participant consents to the processing of his/her data by participating in the game.
The contact details of the participants in the consumer game are usually stored for three months from the end of the game.
The more detailed principles of personal data processing of participants in consumer games may also be stipulated in the rules of the consumer game.

Applying for a job or internship
When applying for a job or internship at Maag Eesti, Maag Eesti processes your personal data with the aim of assessing the applicant’s suitability and compliance with the position applied for.
For this purpose, Maag Eesti processes the following categories of personal data: basic data (e.g. name, personal identification code, date of birth), contact data (e.g. phone number, e-mail, address), data on education, work experience, data on other important skills (e.g. additional training, language or IT -skills) as well as other relevant data that the applicant has deemed important to highlight.
Maag Eesti mainly processes the personal data received from the applicant himself/herself (e.g. when you submit a CV, application, letter of motivation), but also data made available by the applicant in other ways (e.g. through LinkedIn or employment agencies). If it is necessary to check the fulfilment of the requirements set for a specific position, Maag Eesti can also obtain information about the applicant from other sources, such as public registers, referrers, former employers, etc.
We will contact the applicant’s referrer or former employer only if the applicant has given us the relevant contacts and thus consent to contact the referrer.
The documents related to the application are available only to the persons participating in the recruitment process.
The applicant’s personal data is normally retained for one year from the negative decision. With the applicant’s consent, the Maag Eesti candidate may also be considered for other existing or future positions in Maag Group companies. In this case, Maag Eesti will keep the applicant’s personal data for up to two years after the end of the competition.

Client’s data
Being a client of Maag Eesti, Maag Eesti processes the personal data related to you for the fulfilment of the respective contract, more precisely with the aim of ensuring the fulfilment of its contractual obligations, including the sale and delivery of the goods.
For this purpose, Maag Eesti processes the following categories of personal data: basic data (e.g. name, personal identification code, date of birth), contact data (e.g. phone number, e-mail, address), purchase history, bank account number, invoice and payment information.
Related to this Maag Eesti may transfer personal data related to the client, among others, to the logistics service provider.


Right of access to data
The person has the right of access to the personal data collected concerning him/her and the information related to the collection (purpose of processing, categories of recipients). The person also has the right to request a copy of the personal data collected concerning him/her.

Right to rectify data
The person has the right to demand that the controller would rectify the incorrect personal data concerning him/her without unreasonable delay.

Right to erase data – “right to be forgotten”
In certain cases the person has the right to demand the deletion of data. Such cases are, for example, the situation (i) where personal data are no longer needed for the purpose for which these were collected or otherwise processed, or (ii) where the data subject’s consent was the only basis for the processing of specific data and the data subject withdraws the consent.

Right to restriction of processing
The right can be applied in specific cases stipulated in the legislation, e.g. in a situation where the controller assesses whether a person has the right to have their data deleted.

Right to transfer personal data
The right to request the transfer of personal data to another controller, if it is technically feasible.
Right to object
The right to object to the processing of personal data concerning him/her. In this case the controller will not process the personal data further, unless the controller proves that the data is being processed for a valid legitimate reason that outweighs the interests, rights and freedoms of the data subject, or for the purpose of preparing, presenting or defending legal claims.

Right to withdraw the consent
If the data processing is based on the consent of the data subject, he/she has the right to withdraw it at any time.

Right to address questions to Maag Eesti and Estonian Data Protection Inspectorate.
In case of questions or to exercise the aforementioned rights, Maag Eesti can be contacted at the following address:
In addition, the data subject has the right to contact the Estonian Data Protection Inspectorate and submit complaints there if he/she finds that the processing of his/her personal data violates his/her rights and interests based on the applicable law.