Privacy Policy

These terms explain how Speli Baltic OÜ processes your personal data when you use speli.ee and its online shop, place orders or send customer service and business enquiries.

Who processes your data?

The controller for speli.ee and its online shop is Speli Baltic OÜ, registration number 11010013, Pähklimäe 2-15, 74114 Maardu, Estonia. For data protection enquiries, email info@speli.ee or call +372 6700 623.

What data do we use, and why?

• Enquiries and business correspondence: the name, email address, telephone number, company details, enquiry and correspondence you provide. We use these to answer questions, prepare quotations and discuss retail or private label cooperation. The legal basis is taking steps at your request before entering into a contract, or our legitimate interest in answering enquiries and managing business correspondence. We share your enquiry only with employees or service providers who need it to respond.
• Fulfilling orders: your name, email address, telephone number, ordered products, quantities, amounts, payment status and delivery details. Courier delivery requires an address; parcel locker delivery requires the selected locker. For a company invoice, we also process the company name, registration number and billing details. The legal basis is entering into and performing a contract.
• Customer service, withdrawal and complaints: contact details, order identifier, the contents of your request, correspondence and, where necessary, evidence of a defect. The legal bases are performance of a contract, legal obligations and our legitimate interest in handling claims and protecting our rights.
• Accounting: invoices, payment and transaction data, processed to comply with legal obligations.
• Website and shop operation and security: technical session data, shopping basket, IP address and server logs to the extent generated when providing the service. The legal basis is performance of a contract or our legitimate interest in keeping the service operational and protecting it against misuse.
• Marketing: if we offer a newsletter, we send it only with separate consent or another lawful basis. Consent can be withdrawn at any time. Placing an order does not automatically give consent to marketing.

Required fields are marked in the order or request form. Without the information necessary to fulfil an order, we cannot provide that service. We do not ask for your banking password or retain full payment card details.

Online withdrawal notices and complaints are saved in the shop administration, accessible only to users authorised to carry out the relevant work. A receipt confirmation is sent to the email address provided and to Speli customer service at info@speli.ee. Form data is not published on the website or sent to 123FormBuilder through these forms.

Who receives your data?

Only Speli employees and service providers who need the data for their work have access. Where necessary, we share data with your selected carrier (DPD or Smartposti), the payment provider (Swedbank Pay), hosting and IT support, email, accounting and business software providers. Access is limited to its purpose, with appropriate contractual and technical safeguards.

We disclose data to public authorities only where there is a lawful basis. Processing outside the European Economic Area requires safeguards compliant with data protection rules, such as a European Commission adequacy decision or standard contractual clauses. Contact info@speli.ee for details of specific recipients and safeguards.

How long do we keep data?

Accounting source documents are retained for seven years from the end of the relevant financial year. Other enquiry, order and customer service data is retained for as long as necessary to perform the contract, resolve complaints, meet legal obligations or protect legal claims. During a dispute, retention may continue until it is finally resolved. If marketing consent is withdrawn, we stop the relevant marketing; evidence of consent may be retained to meet obligations and defend claims.

Your rights

You have the right to information and access to your data, to correct inaccurate data and, under the conditions set out in law, to request erasure, restriction or portability, and to object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

Send your request to info@speli.ee. We may need to verify your identity appropriately. We normally respond within one month. Legal retention obligations may limit erasure. If you believe your rights have been infringed, you can contact the Estonian Data Protection Inspectorate.

We do not make decisions based solely on automated processing of orders that have legal or similarly significant effects on you. See our Cookies page for information about cookies.

Updated 06.10.2026