Privacy Policy
Last updated: 6 October 2026
1. Who we are
The website comdecor.eu is operated by Comdecor OÜ (registry code 10905133, address Laki 26, 12915 Tallinn, Estonia), hereinafter “we”. We are the controller of your personal data. For any privacy questions, please write to us at info@comdecor.eu.
This document explains what data we collect through the website, why, how long we keep it, who we share it with and what rights you have.
2. What data we collect and why
Price request
No payments are made on the website: when you choose products, you send us a price request. For this we ask for your name, company name, email address, phone number, address, preferred delivery method, the selected products and quantities, and any comments and files you add.
We use this data to prepare a quotation, to communicate with you and to fulfil the order. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR). If the request becomes an order, we keep the billing data as required by accounting law (Article 6(1)(c) GDPR).
Contact form
Through the contact form we ask for your name, company name, email address, phone number and message. When the form is sent, we also store your IP address and browser details to protect the form against spam and abuse. We use the data to reply to your enquiry. The legal basis is our legitimate interest in answering your question and protecting the website (Article 6(1)(f) GDPR) and, for pre-contractual enquiries, Article 6(1)(b) GDPR.
To prevent spam, the contact form uses Cloudflare Turnstile, which checks that the form is filled in by a human.
Newsletter
If you subscribe to our newsletter, we use your email address and name to send you offers and news. The legal basis is your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time via the link at the end of each email or by writing to us.
Use of the website, cookies and analytics
Cookies that are necessary for the website to work are always in use. We use analytics and advertising cookies only if you have given your consent in the cookie banner (Article 6(1)(a) GDPR and the ePrivacy rules). You can change your consent at any time through the website’s cookie settings.
With your consent, we collect data on how the website is used (pages visited, device, browser, approximate location, where the visitor came from) and measure the effectiveness of our advertising. When you send a price request or the contact form, we may, with your consent, pass conversion data to advertising platforms (Google, Meta, LinkedIn, OpenAI). In that case your email address and phone number are only sent in encrypted (hashed) form, so that the platform can measure the result of an ad without seeing the data in plain text.
3. Cookies we use
| Cookie | Service | Purpose | Duration |
|---|---|---|---|
| cookieyes-consent | CookieYes | Necessary: remembers your cookie choices | 1 year |
| wp-wpml_current_language | Website | Necessary: remembers the selected language | Session |
| woocommerce_*, wp_woocommerce_session_* | Website | Necessary: contents of the price request cart | Up to 2 days |
| sbjs_* | WooCommerce | Necessary / statistics: origin of the price request (where the visitor came from) | Session to 1 hour |
| _ga, _ga_* | Google Analytics | Analytics: visit statistics | Up to 13 months |
| _gcl_au, _gcl_aw, _gcl_gs, GCL_AW_P, IDE, test_cookie | Google Ads | Advertising: measuring ad performance | 15 minutes to 13 months |
| _fbp | Meta (Facebook, Instagram) | Advertising: ad measurement and targeting | 3 months |
| bcookie, lidc, li_gc | Advertising: ad measurement and storing consent | 1 day to 1 year | |
| __oaiq_consent, __oppref, __obref | OpenAI (ChatGPT ads) | Advertising: measuring ad performance | 30 days to 1 year |
4. Who we share data with
We do not sell your data. Data is processed on our behalf by the following service providers, with whom we have data processing agreements:
- Zone Media OÜ (Estonia): website hosting, database and sending emails;
- Google Ireland Ltd: Google Analytics, Google Ads and Google Tag Manager (with consent);
- Stape: server-side forwarding of analytics and advertising data to advertising platforms (with consent); servers are located in the European Union (Finland);
- Meta Platforms Ireland Ltd: Meta ad measurement (with consent);
- LinkedIn Ireland Unlimited Company: LinkedIn ad measurement (with consent);
- OpenAI: measuring the performance of ChatGPT ads (with consent);
- Cloudflare, Inc.: spam protection of the contact form (Turnstile);
- CookieYes Ltd: cookie consent management;
- MailerLite: sending newsletters (if you have consented to this);
- transport and courier companies: data needed to deliver the order (name, address, phone number).
Some of these companies (Google, Meta, LinkedIn, OpenAI, Cloudflare) may also process data outside the European Economic Area, in particular in the United States. In that case the transfer is based on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
We may also disclose data to public authorities where required by law.
5. How long we keep data
- Price requests and contact form enquiries: 3 years from the last communication;
- Data related to orders and invoices: 7 years as required by accounting law;
- Log of emails sent by the website (without the content): 90 days;
- Newsletter data: until consent is withdrawn;
- Cookies: as shown in the table above.
6. Your rights
You have the right to:
- know what data we process about you and receive a copy of it;
- have inaccurate data corrected;
- have your data erased when we no longer have a reason to keep it;
- restrict or object to the processing of your data;
- receive the data you provided in a machine-readable format (data portability);
- withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, write to info@comdecor.eu. We will reply within one month at the latest. If you believe we are infringing your rights, you can lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee, info@aki.ee) or the data protection authority of your country of residence.
7. Data security
The website uses an encrypted connection (HTTPS). Only employees and partners who need the data for their work have access to it. We make regular backups and keep our software up to date.
8. Changes
We may update this privacy policy from time to time. The current version is always available on this page, and its date is shown at the top.