1. Data Controller Information
1.1. The personal data controller is Deus Detail OÜ (registry code: 17568455, VAT: EE103014582, address: Masina tn 20, Kesklinna linnaosa, Tallinn 10144, Estonia; email: hello@deusdetail.ee; hereinafter "Deus Detail", "we", or "us").
1.2. We process personal data in strict compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus — IKS).
2. Categories of Personal Data Collected
Deus Detail collects and processes the following personal data:
- Contact & Identification Data: First and last name, telephone number, email address.
- Vehicle Information: Vehicle make, model, registration plate number, visual condition inspection records.
- Booking & Service History: Selected detailing packages, visit dates, communication history, customer feedback.
- Financial & Invoicing Data: Billing address, bank account number, company name, registration code, and VAT number for B2B accounts.
- On-Site Video Surveillance Data: CCTV footage captured at Masina 20 studio (service bays, entry/exit gates).
- Technical Web Data: IP address, browser type, cookies, and website usage statistics via deusdetail.ee.
3. Purposes & Legal Bases for Data Processing
3.1. Performance of a Contract (GDPR Art. 6(1)(b)): Processing contact details, vehicle data, and booking information to fulfill detailing services, issue gift cards, confirm appointments, and deliver client support.
3.2. Compliance with Legal Obligations (GDPR Art. 6(1)(c)): Processing invoice and payment data to comply with statutory accounting and tax duties under the Estonian Accounting Act (Raamatupidamisseadus).
3.3. Legitimate Interests (GDPR Art. 6(1)(f)):
- Operating CCTV cameras at Masina 20 to protect client vehicles, prevent property theft, verify pre-existing vehicle damage, and resolve potential liability claims.
- Maintaining business communications and improving studio service quality.
3.4. Consent (GDPR Art. 6(1)(a)): Processing technical cookies or direct marketing communications where explicit consent has been granted.
4. On-Site CCTV Video Surveillance Notice
4.1. Location & Scope: Deus Detail operates fixed CCTV surveillance cameras covering entry gates, parking areas, and internal detailing bays at Masina 20, Tallinn.
4.2. Purpose: Ensuring property security, vehicle safety during service execution, and verification of vehicle physical condition.
4.3. Retention Period: Video recordings are automatically overwritten every fourteen (14) to thirty (30) calendar days, unless an active legal claim or police investigation requires extended retention.
5. Data Processors & Recipients
5.1. Deus Detail does not sell or rent personal data to third parties.
5.2. We share data only with authorized data processors who act under strict confidentiality and GDPR compliance obligations:
- Online booking system providers (e.g., SalonLife);
- Accounting software and professional bookkeeping partners;
- Banking and payment gateway processors (LHV, card terminals);
- IT hosting, website administration, and security maintenance providers;
- Estonian Tax and Customs Board (Maksude ja Tolliamet — EMTA) and law enforcement upon official legal demand.
6. Data Storage & Retention Periods
- Booking & Service Data: Retained for 3 years from last visit to manage service guarantees and customer history.
- Accounting & Invoicing Records: Retained for seven (7) years from the financial year-end in compliance with the Estonian Accounting Act.
- CCTV Video Footage: Retained for 14–30 days.
- Gift Certificate Data: Retained until voucher redemption plus 3 years.
7. Data Subject Rights
Under the GDPR, you have the following statutory rights regarding your personal data:
- Right of Access: Obtain confirmation and a copy of your personal data processed by us.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of data where legal processing grounds no longer exist.
- Right to Restrict Processing: Request temporary limitation of processing under disputed circumstances.
- Right to Data Portability: Receive data in a structured, commonly used machine-readable format.
- Right to Lodge a Complaint: Submit a complaint to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon — AKI, address: Tatari 39, 10134 Tallinn; email: info@aki.ee; website: aki.ee).