This privacy policy explains how Shelax IT Services OÜ (“we”, “us”) processes personal data when you visit superpreisse.com, request a quote or place an order. We process data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
1. Controller
Shelax IT Services OÜ, Paavli tn 5a/1, 10412 Tallinn, Estonia
E-mail: hakan@superpreisse.com · Phone: +49 176 45159468
Managing director: Hakan Erol
2. Data we process and why
2.1 Visiting the website (server log files)
When you open our website, our hosting provider automatically stores: IP address, date and time, requested page, referrer, browser type and operating system. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website). Logs are deleted after no more than 30 days unless needed for security investigations.
2.2 Hosting
The website is hosted by Hostinger International Ltd. (Cyprus) on servers in the EU. Hostinger processes data on our behalf under a data processing agreement (Art. 28 GDPR).
2.3 Cookies
We use essential cookies required to run the shop (shopping cart, session, security, your cookie choice). These are set on the basis of Art. 6(1)(f) GDPR and § 25(2) of the ePrivacy rules (strictly necessary). Statistics and marketing cookies are only set after you have given consent in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw or change your consent at any time via “Cookie settings” at the bottom of every page. Details are listed in our Cookie policy.
2.4 Quote requests and contact
If you use the quote form or e-mail us, we process the data you provide (name, company, e-mail, phone, country, VAT ID, message, requested product and quantity, IP address for abuse prevention) to answer your request and prepare an offer. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR (abuse prevention). Requests are stored for 12 months after the last contact unless a contract results, in which case commercial retention periods apply.
2.5 Orders, invoicing and payment
For orders we process your name, billing and delivery address, e-mail, phone, VAT ID, ordered products and payment details. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (accounting and tax law). Payments are made by bank transfer to our business account at Wise Europe SA (Belgium); if you pay through a payment service provider (e.g. PayPal or Stripe), that provider processes your payment data under its own privacy policy. Invoice and accounting data are retained for 7 years as required by the Estonian Accounting Act.
2.6 Shipping
To deliver goods we pass your name, delivery address, phone number and e-mail to the carrier or freight forwarder (e.g. DHL, DPD, UPS, Omniva or a pallet forwarder) so the shipment can be delivered and you can be notified. Legal basis: Art. 6(1)(b) GDPR.
2.7 E-mail
Our e-mail is provided by our hosting / mail provider; e-mails are stored for as long as required for the business relationship and statutory retention.
3. Recipients and international transfers
Data is shared only with the processors and recipients named above (hosting, e-mail, payment, shipping, tax adviser/accountant) and with authorities where legally required. If a recipient is located outside the EU/EEA (for example a carrier delivering to your non-EU country, or a payment provider), the transfer is based on an adequacy decision or the EU Standard Contractual Clauses (Art. 46 GDPR), or is necessary for the performance of your contract (Art. 49(1)(b) GDPR).
4. Retention
We keep personal data only as long as necessary for the purposes above or as required by law (in particular 7 years for accounting documents). After that the data is deleted or anonymised.
5. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, e-mail hakan@superpreisse.com.
You also have the right to lodge a complaint with a supervisory authority, in particular the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, aki.ee) or the authority of your country of residence.
6. Obligation to provide data
Providing data is voluntary, but without the data marked as required we cannot answer your request or fulfil an order.
7. No automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
8. Security
The website is served over TLS (https). Access to personal data is limited to persons who need it for the purposes described.
9. Changes
We may update this policy when our services or the legal situation change. The current version is always available on this page.
Last updated: October 2026