Privacy policy

Effective from: 24.09.2026

1. Data controller

This privacy policy explains how AS Maris Gilden processes personal data collected through the website marisgilden.ee. The website is available in Estonian, Russian and English; the same rules apply in all languages.

• AS Maris Gilden
• Vasara 50b, 50113 Tartu, Estonia
• Tel. +372 730 6040
• E-mail: maris@gilden.ee

2. What data we collect and why

2.1 Data sent through the forms on the website

The website has four forms: the contact form, the partner form (cooperation), the price request for a product and the inquiry list (one quote for several products at once). Depending on the form, we collect: company name, contact person, e-mail address, phone number, country, sales channel, number of stores, your message and the requested products and quantities. To protect the forms from spam, we also store technical data with the inquiry: IP address, browser information and the address of the page the form was sent from.

The inquiry is stored in the website database with a reference number. You receive a confirmation e-mail; the inquiry itself goes to our sales team.

• Purpose: answering your inquiry, preparing an offer and handling the related correspondence.
• Legal basis: our legitimate interest in answering inquiries addressed to us, and steps taken prior to entering into a contract.
• Retention period: until the inquiry has been resolved. If the inquiry leads to a business relationship, we keep the data as required by accounting and other legislation. If no business relationship follows, the inquiry is deleted after 12 months.

2.2 Cookies

We do not use visitor statistics or advertising measurement services on the website. On the Contact page the Google Maps map loads only at your request and with consent to external-service cookies; only then does Google place cookies on your device. Without consent the website uses only necessary cookies and browser storage.

• Purpose: showing external content (the Google Maps map) only when you ask for it.
• Legal basis: your consent, given through the cookie notice. You can change or withdraw it at any time via the “Cookies” link in the footer.

The names, lifetimes and providers of the cookies are listed in our cookie policy.

2.3 Taste Club (Maitseklubi) newsletter

The Taste Club is our newsletter. To join, you enter your e-mail address on the website. The address is added to our subscriber list in MailerLite and you receive a welcome e-mail right away. After that we send one or two e-mails a month about new products and club news. Every e-mail contains an unsubscribe link.

As a record of your consent, we store the time of subscription, the IP address and the website language in which you subscribed together with your subscriber data.

• Purpose: sending the newsletter and running the monthly Taste Club draw (see 2.4).
• Legal basis: your consent, given by submitting the subscription form. You can withdraw it at any time via the unsubscribe link at the end of every e-mail or by writing to maris@gilden.ee.
• Retention period: for as long as you are a subscriber. After you unsubscribe, the address is removed from the subscriber list within 30 days.

2.4 Taste Club draw

Joining the Taste Club means you automatically take part in the monthly prize draw. The winner is picked at random by software from the active subscribers who subscribed before the draw time and have not won in the previous 12 months. The full rules of the draw are published on the Taste Club page.

For the draw we use the subscriber’s e-mail address, name (if given), language and time of subscription. From the winner we additionally ask for a phone number and a way to receive the prize (a parcel locker in Estonia or our office in Tartu).

• Purpose: selecting and notifying the winner and handing over the prize.
• Legal basis: your consent given when joining the Taste Club; for the winner’s data, handing over the prize and accounting requirements.
• Publication: we may publish the winner’s first name and the initial of the surname on the Taste Club page and in the newsletter. The full name is published only with the winner’s explicit consent.
• Retention period: the winner’s data (name, e-mail, delivery details) is kept for 12 months to apply the “one win in 12 months” rule, and for as long as accounting legislation requires where the prize has to be recorded in the accounts.

3. Who we share data with

We do not sell your personal data or pass it on to third parties for marketing purposes.

The following service providers process data on our behalf and on our instructions:

• Zone Media OÜ (Estonia) — website hosting and the database in which inquiries are stored.
• MailerLite UAB (Lithuania, EU) — the Taste Club subscriber list and sending of newsletters.
• Sendinblue SAS / Brevo (France, EU) — sending of transactional e-mails: inquiry confirmations, welcome e-mails, winner notifications.
• Google Ireland Ltd — the Google Maps map on the Contact page (only with consent).
• Parcel locker operator Omniva or DPD — the winner’s name and phone number for delivering the prize.

Zone Media, MailerLite and Brevo are based in the European Union. Google may transfer data outside the European Economic Area, mainly to the United States. In that case the transfer is based on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

We may also disclose data where the law requires it, for example at the request of a supervisory authority or a court.

4. Data security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. The connection to the website is encrypted (HTTPS). Only employees who need the data to perform their duties have access to it.

5. Your rights

You have the right to:

• be informed about which data concerning you we process and to access it;
• request the correction of inaccurate data;
• request the deletion of data;
• request the restriction of processing or object to processing;
• request the transfer of data;
• withdraw consent at any time. You can unsubscribe from the newsletter via the link at the end of every e-mail and change your cookie choice via the “Cookies” link in the footer.

To exercise your rights, contact us at maris@gilden.ee. We will respond within one month at the latest.

If you believe your rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, Tallinn, e-mail info@aki.ee, website http://www.aki.ee).

6. Changes to this privacy policy

We may update this privacy policy from time to time, for example when we add a new service to the website. The current version is always available on this page together with the date of the latest change.