Privacy Policy
Probow Store (hereinafter "company" or "we") respects your privacy and is committed to protect it through compliance with this privacy policy (hereinafter "Privacy Policy"). In this Privacy Policy, we will inform you about how we process your personal data. We commit ourselves to be transparent with you by providing clear information about what personal data we process, the purpose of the processing, the retention period of the personal data, the legal basis for processing, and other information required under applicable law.
1. What personal data do we process and why?
The categories of personal data that we process about you, the purposes and legal basis for the processing are the following:
1.1 Public relations
Categories of personal data:
- Name
- Surname
- Company (media)
- Phone
- Address
- Company name (legal person)
- VAT registration number
- Bank account
Legal basis for the processing: We process personal data based on your consent or our legitimate interest in maintaining public relations.
We process your personal data for the purpose of distributing relevant information to the general public or specific groups. If you would like to receive corporate news from our company, we will collect certain information about you.
We use the collected data to send you corporate news (e.g., press releases), event invitations, and to communicate via email, phone, social media (Messenger, Viber, WhatsApp, etc.) or other channels (e.g., Skype) where necessary.
We obtain information when:
- You express your wish to receive company news (via email or at events)
- You communicate with our Marketing/Public Relations team
- We use public sources (e.g., media contact lists)
Retention: Your data will be stored:
- Until you unsubscribe or request deletion
- Until we find the contact is no longer valid
- Or for 5 years from collection
Disclosure: We may share data with:
- Public Relations agencies
- IT maintenance service providers
1.2 Agreements with natural persons, including received/issued invoices
1.2.1 Agreements with natural persons
Categories of personal data:
- Name
- Surname
- Bank account
- Date of birth or personal ID number
- VAT registration number (if registered as VAT payer)
- Commercial register number
- Address
- Contacts (email, phone)
Legal basis:
- Contractual necessity
- Legal obligation
- Legitimate interest (e.g., legal protection)
Purposes:
- Contract creation and management
- Payment processing
- Tax compliance
- Debt recovery and legal claims
Mandatory data:
- Name, surname, birth date/ID
- VAT number
- Address
- Register number
- Contacts
Retention:
- 7 years from the end of the financial year in which the agreement expired
- Or 7 years from the end of the warranty period
- Or 1 year after final legal decision (if involved in legal claims)
Disclosure:
- Banks, tax authorities, auditors
- Legal/financial advisers
- Debt collection agencies
- IT service providers
1.2.2 Invoices to/from natural persons
Categories of personal data:
- Name
- Surname
- Bank account
- VAT registration number (if registered as VAT payer)
- Commercial register number
- Address
- Contacts (email, phone)
Legal basis:
- Legal obligation
- Legitimate interest (e.g., debt recovery)
Purposes:
- Proper invoice handling
- Compliance with tax reporting
- Legal claims and debt collection
Mandatory data for invoicing:
- Name, surname
- VAT number
- Address
- Register number
Retention:
- 7 years from end of the financial year in which invoice was issued/received
Disclosure:
- Banks, tax authorities, auditors
- Legal/financial advisers
- Debt collection agencies
- IT service providers
2. To whom do we disclose personal data?
We disclose your personal data to:
a) Companies we work with
- Service providers
- Group companies offering support, maintenance, or administration
b) State and local government institutions
- When requested by authorities
- When necessary to assert or defend legal claims
3. Protection of personal data
We apply technical and organizational security measures to protect your data. It is stored on secure systems with limited access only to authorized personnel.
4. Your rights
You have the following rights:
- Right to access: You can request confirmation whether we process your data and get access to it.
- Right to rectification: You can request correction of inaccurate data.
- Right to erasure: In certain circumstances, you can request deletion of your data. Exceptions apply.
- Right to data portability: You can receive or transfer your data in a structured format when based on consent or contract.
- Right to restriction: You can ask us to pause processing while storage continues.
- Right to object: You may object to processing based on legitimate interest.
- Right to object to marketing: You may object to direct marketing.
- Right to withdraw consent anytime.
To exercise your rights, submit a written request to us.
You may also contact the Estonian Data Protection Authority if you believe we have violated applicable laws.
5. Changes to our privacy policy
We keep this Privacy Policy under regular review. This version was created on 16th September, 2025.