Privacy Policy

Effective Date: 01.03.2026
Last Updated: 08.03.2026

Website Minupidu.ee. owned and operated by the company Grin Studio OÜ.

Personal Data Operator:
Grin Studio OÜ
Registration Code: 12261817
Address: Sojakooli 14, Kristiine linnaosa, 12916 Tallinn, Harju maakond, Estonia
Email regarding personal data issues: info@minupidu.ee
Phone: +372 5538455

This Privacy Policy describes what personal data we collect, how we use it, on what basis we process it, to whom we may share it and what rights users of the website have.

1. general provisions

1.1 This Policy applies to the processing of personal data of website users Minupidu.ee., including visitors to the site, registered users, customers of paid services, advertisers, and those who send messages through the site's forms.

1.2 We process personal data in accordance with applicable European Union and Estonian law, including Regulation (EU) 2016/679 (GDPR) и Estonian Personal Data Protection Act.

1.3 If you have any questions about the processing of personal data, you can contact us at: info@minupidu.ee.

2. What personal data we collect

Depending on exactly how you use the website, we may process the following data:

• name

• surname

• e-mail address

• phone number

• company name

• address

• IP address

• browser and device technical data

• user account information

• the content of messages sent through the website forms

• feedback, comments and other materials left on the website

• Photos, images and other media files uploaded to advertisements

• social media links

• order data and purchase history

• payment-related data

• Cookie identifiers and other online identifiers

• other data that the user voluntarily provides when using the website

We do not utilize accurate user geolocation as a separate feature of the site.

3. sources of personal data

We receive personal data:

• directly from the user when registering, filling out a profile, placing an ad, paying for services, subscribing to a newsletter, submitting a form or leaving feedback

• automatically when you use the site, including through technical logs, cookies and analytical tools

• from data that the user himself publishes on the website

• in some cases from open sources, if such data is uploaded by the user himself as part of the advertisement

If the user places personal data of third parties in the advertisement, the user is solely responsible for the existence of a legal basis for such publication.

4. Purposes of personal data processing

We process personal data for the following purposes:

• user account creation and maintenance

• placing, editing and displaying ads on the site

• provision of paid services for placement and promotion of advertisements

• order and payment processing

• billing and accounting

• customer support

• communication with users regarding site operation, orders and placements

• publishing testimonials and user-generated content

• Ensuring site security and preventing abuse

• improving site performance, analytics and statistics

• Conducting marketing campaigns, remarketing and measuring advertising effectiveness

• sending email newsletters if there is a relevant reason to do so

• Handling complaints, claims and disputes

• fulfillment of statutory obligations

5. Legal grounds for processing

We process personal data on one or more of the following bases:

• fulfillment of the contract or actions required prior to the conclusion of the contract - for example, when creating an account, purchasing a paid placement, providing access to the site's functionality

• fulfillment of a legal duty - e.g., for accounting and financial record keeping

• our legitimate interest - for example, to secure the site, maintain internal analytics, protect against abuse, resolve disputes and protect our rights

• User consent - e.g. for marketing mailings, optional cookies and individual marketing tools where required by law

The GDPR allows the processing of personal data on the basis of contract, legal obligation, legitimate interest and consent, among others, while the AKI separately clarifies the rights of data subjects and how to exercise them.

6. Public data on the website

6.1. since Minupidu.ee. is a catalog of services, some of the data added by the user in the ad card may be publicly available to all visitors of the site.

6.2 Such data may include, but is not limited to:

• name or title of the contractor/company

• pictures

• service description

• prices

• contact number

• e-mail address

• social media links

• address or service area

• feedback and rating

6.3 The User placing an ad understands and agrees that the data specified by him/her for publication in the ad card may be publicly available on the Internet and indexed by search engines.

7. Payments

7.1 Payment for paid services on the website is made via Stripe and related payment mechanisms.

7.2 We do not store full payment details of bank cards on our servers. Payment transactions are processed through an external payment provider in accordance with its rules and privacy policy.

7.3 We may receive data from the payment provider that is necessary for payment confirmation, order management, accounting, refunds and dispute resolution, for example:

• payment identifier

• payment status

• amount

• payment date

• related order data

• partially masked payment information, if provided by the system

8. Auto-renewal and refunds

8.1 The website may use both one-time payments and mechanisms for auto-renewal of paid services.

8.2 Refunds may be considered at the written request of the user with justified reasons.

8.3 Data related to refunds, correspondence on disputed payments and financial documents may be kept for as long as necessary to fulfill legal obligations, protect the company's rights and resolve disputes.

9. To whom we may share personal data

We may share personal data with the following categories of recipients as necessary to operate the site and provide services:

• Hosting and technical infrastructure providers

• developers and IT contractors providing support for the site

• providers of analytics and marketing tools

• to payment providers, including Stripe

• accounting and tax consultants

• email newsletters

• providers of services related to security and protection against abuse

• to government agencies and other persons if such transfers are required by law or are necessary to protect our rights

We do not sell users' personal data as a separate product.

10. International data transmission

Some of our service providers may process data outside Estonia or the European Economic Area. In such cases, we endeavor to use only such transfer mechanisms as are permitted by applicable law, including standard contractual clauses or other statutory guarantees.

AKI points out that personal data may be transferred to third countries if the GDPR's safeguard mechanisms are in place.

11. data security

We take reasonable organizational, technical and administrative measures to protect personal data from unauthorized access, loss, destruction, alteration, disclosure or other unauthorized use.

Such measures may include:

• data access restriction

• use of passwords and means of authentication

• software update

• control of access to the administrative part of the site

• secure connection

• backup

• internal procedures for handling requests and incidents

However, no data transmission or storage system can guarantee absolute security.

12. Retention periods for personal data

12.1 We will retain personal data for no longer than is necessary for the purposes for which it was collected, unless a longer retention period is required by law or justified for the protection of our rights.

12.2 Approximate timeframes or approaches to storage:

• account data - until the account is deleted by the user or us, or until a reasonable period of inactivity has elapsed

• announcement data - as long as the announcement is active, archived or needed for dispute resolution

• correspondence and support appeals - as long as necessary to process the appeal and protect the interests of the parties

• Order and payment data - for as long as necessary for accounting, tax accounting, returns and dispute resolution

• data for marketing mailings - until consent is withdrawn or the relevant purpose of processing ceases

• cookie data and related preferences - in accordance with our Cookie Policy and technical retention periods

12.3 Accounting source documents and related data shall be kept for at least the period prescribed by Estonian law. At the time of preparation of this text, Estonian law requires that accounting source documents be kept for at least 7 years from the end of the relevant financial year.

13. User rights

If the processing relates to your personal data, you may have the following rights:

• the right to request access to their personal data

• the right to request correction of inaccurate data

• the right to request deletion of the data if there is no legitimate reason to process it further

• the right to request restriction of processing in cases provided for by law

• the right to object to processing based on legitimate interest or used for direct marketing purposes

• the right to data portability, if applicable

• the right to withdraw consent if the processing is based on consent

• the right to file a complaint with a supervisory authority

The AKI explicitly states that an individual can apply if his or her privacy rights are violated by the processing of personal data, and the privacy policy itself should inform about the procedure for exercising the data subject's rights.

To exercise your rights, write to us at: info@minupidu.ee

14. Deletion, correction and restriction of processing

14.1 The User may request the rectification or deletion of their data, as well as the restriction of their processing, by writing to info@minupidu.ee.

14.2 If the request relates to data posted to a user account or advertisement, we may first request proof of identity or proof of control of the relevant account.

14.3 In some cases we may not be able to delete all data immediately if its retention is required by law, for accounting purposes, to resolve disputes, to prevent fraud or to protect our legitimate interests.

15. Reviews and user-generated content

15.1 Users may post reviews, photos, descriptions, prices and other content on the Site.

15.2 The User is responsible for the legality, authenticity and lawfulness of the posting of such content, including the existence of rights to publish personal data, images, texts and materials of third parties.

15.3 We may remove or hide any User Content if we believe that it violates the law, the rights of third parties, site rules or may cause harm to the site or other users.

16. Direct marketing

16.1 We may use email and other contact details to send information and marketing communications if we have a legitimate reason to do so.

16.2 If processing is carried out on the basis of consent, the User may withdraw consent at any time.

16.3 If the user does not wish to receive marketing messages, he/she may:

• use the unsubscribe link in the email

• e-mail us at info@minupidu.ee

AKI specifically states that subscription to the newsletter must be based on consent that can be withdrawn at any time.

17. Cookies and analytics

The Site uses cookies and similar technologies. Some cookies are strictly necessary for the operation of the site and some are analytical, marketing or functional.

Details of cookies, their categories, retention periods and how to manage them are set out in a separate page: Cookie Policy.

18. Minors

The site may be used by minors. However, a user who publishes advertisements, offers paid services or provides third-party data must act legally and be responsible for the legality of such actions.

If you believe that a minor has improperly shared personal information with us, please contact us at info@minupidu.ee.

19. Dispute resolution and supervisory authority

If you have any questions or complaints regarding the processing of personal data, please first contact us at: info@minupidu.ee.

You also have the right to file a grievance with Andmekaitse Inspektsioon, which is the supervisory authority for data protection in Estonia. AKI explicitly states that it assists in cases of violation of privacy rights in the processing of personal data.

20. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, the structure of the Site, the services used or the way we process data.

The current version is always published on the website Minupidu.ee..

21. Contacts

Grin Studio OÜ
Registration Code: 12261817
Address: Sojakooli 14, Kristiine linnaosa, 12916 Tallinn, Harju maakond, Estonia
Email: info@minupidu.ee
Phone: +372 5538455