Privacy Policy

Last updated: 19.10.2026

General Information

BAHUS OÜ (reg. code 14316592), located at Valdeku 120-10, 11215, Tallinn, Harju maakond, Tallinn, Estonia, is the controller of your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. This policy explains what data we process in the Alkoholi Bahus online store and how.

What data we collect

We collect only the data necessary to fulfil your order and provide our service: name, email address, phone number, delivery address (or the selected parcel locker) and order details. Payment data is processed by the Montonio platform — we do not store bank details in our systems. If you subscribe to our newsletter or write to us via the contact form, we process the email address and message you provide. When you buy alcohol, your age is verified against an identity document at handover. Without the data required for an order, we cannot fulfil it.

Purpose of data processing

Your data is processed for the following purposes: order processing and fulfilment; arranging delivery to parcel lockers and handing over orders in the store; processing payments via Montonio; customer support and handling complaints; verifying age to comply with alcohol sales regulations; accounting and meeting other legal obligations; sending the newsletter — only with your consent; a single reminder about an unpaid order; website security and protecting our legal claims. The legal bases are performance of a contract (GDPR art. 6(1)(b)), a legal obligation (art. 6(1)(c)), your consent (art. 6(1)(a)) and our legitimate interest (art. 6(1)(f)) — for the unpaid-order reminder, security and protection of legal claims. You have the right to object to processing based on legitimate interest.

Sharing data with third parties

We share your data with third parties only to the extent necessary to fulfil your order and operate the store: parcel locker operators and carriers (DPD, Omniva, Unisend, SmartPosti) for delivery; Montonio OÜ for processing payments; IT service providers (hosting, email, internal order notifications) to run the store; public authorities where required by law. We do not sell or rent your data to third parties for marketing purposes. If data is transferred outside the European Economic Area, we ensure appropriate safeguards (a European Commission adequacy decision or standard contractual clauses).

Data retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, but no longer than 3 years after your last order. Accounting records are retained for 7 years in accordance with Estonian accounting law. The email address used for the newsletter is retained until you withdraw your consent (unsubscribe).

Your rights

Under the GDPR, you have the right to be informed about the processing of your data, to access your data, to have it rectified, to have it erased (“right to be forgotten”), to restrict processing, to data portability and to object to processing, as well as to withdraw your consent at any time (this does not affect the lawfulness of processing before withdrawal). To exercise your rights, please contact us at info@alkoholibahus.fi.

Cookies

Our website uses cookies to ensure the proper functioning of the website and to improve user experience. Cookies are used for shopping cart functionality and session management. We do not use third-party analytics or advertising cookies.

Security

We implement appropriate technical and organisational measures to protect your personal data. All data transmissions are protected by encryption (HTTPS/TLS). Payment data is processed exclusively on Montonio's secure platform. Access to personal data is restricted to employees who need it to perform their duties.

Filing complaints

If you have questions or complaints regarding the processing of personal data, please first contact us at info@alkoholibahus.fi. We will respond without undue delay and no later than within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee) or with the supervisory authority of your country of residence.

Changes to this Privacy Policy

We reserve the right to amend this privacy policy. In the event of significant changes, we will notify you by email or by publishing a notice on our website. The updated policy takes effect from the moment it is published on the website.

Contact