Privacy policy
Last updated: 25 December 2025
This Privacy Policy describes how maailmalapsed.ee (hereinafter the Website) collects, uses and protects users’ personal data. The Website has been created and is managed using the Wix platform.
1. Data Controller
The controller of personal data is:
Mamefo OÜ
Registry code: 16529027
Address: Käpa tee 7-2, Liivamäe, Jõelähtme Parish, 74207, Harju County, Estonia
E-mail: info@maailmalapsed.ee
2. What Personal Data Is Collected
Personal data is collected in the following cases.
2.1. Contact Form
Through the contact form, the following data is collected:
– first and last name
– e-mail address
– content of the message
This data is used to contact the user and respond to enquiries.
2.2. Online Store and Orders
When placing an order, the following data is collected:
– name
– e-mail address
– delivery address
– telephone number, if necessary
– order details
When processing payments, payment data, including card details, may be processed and stored in the systems of Wix and third-party payment service providers, such as Maksekeskus, PayPal, Stripe, Apple Pay and Google Pay, where the user has given explicit consent for this.
The Website and the Seller do not store or have access to the user’s payment card details.
2.3. Dedications
If a customer wishes to add a dedication to an ordered book, they may voluntarily provide the name of a child or another person.
This data is used only for fulfilling the specific order and is not disclosed to third parties or retained for longer than necessary.
2.4. Newsletter
When subscribing to the newsletter, the following data is collected:
– name
– e-mail address
The user may unsubscribe from the newsletter at any time via the relevant link.
3. Purposes of Using Personal Data
Personal data is used for the following purposes:
– processing and fulfilling orders
– communicating with customers
– responding to questions and enquiries
– invoicing and payment processing
– fulfilling legal obligations
– sending marketing communications only on the basis of the user’s consent
4. Legal Basis
Personal data is processed on the following legal bases:
– performance of a contract: orders and services
– user consent: contact form, newsletter and cookies
– legal obligation, such as accounting
– legitimate interest: operation, security and development of the Website
5. Data Retention
Personal data is retained as follows:
– data related to orders is retained in accordance with the requirements arising from accounting legislation
– contact form enquiries are retained until the purpose has been fulfilled or for a reasonable period of time
– newsletter data is retained until the user unsubscribes
Data is not retained for longer than is necessary to achieve the purpose of processing or as required by law.
6. Disclosure of Data to Third Parties
Personal data may be disclosed to trusted service providers, including:
– website hosting and platform service providers, such as Wix
– e-mail and newsletter service providers
– payment service providers, such as PayPal, Stripe and Maksekeskus
– delivery service providers, such as DPD, Omniva and Unisend
– cloud service providers, such as Google Drive and Google Workspace
All service providers process personal data in accordance with applicable data protection requirements and agreements.
7. Cookies
The Website uses cookies to ensure the functioning of the Website, collect statistics and improve the user experience.
The Website may use:
– technical cookies
– analytical cookies
– marketing cookies
The use of cookies may be subject to separate consent requested via a cookie banner. The user may restrict or disable the use of cookies through their browser settings.
8. Social Media
The Website may contain links or buttons to social media platforms, such as Facebook and Instagram. When using these platforms, the privacy terms of the respective platforms apply, and the Website is not responsible for the data processing carried out by those platforms.
9. Data Security
Reasonable technical and organisational measures are implemented to protect personal data against unauthorised access, alteration, disclosure or destruction.
10. User Rights
The user has the right to:
– receive information about the processing of their personal data
– request the correction of inaccurate data
– request the deletion of personal data, provided this does not conflict with legal obligations
– restrict the processing of personal data
– withdraw consent that has been given
To exercise their rights, users are asked to contact us by e-mail.
11. Complaints and Dispute Resolution
If the user has any questions or complaints regarding the processing of personal data, they are asked to first contact us by e-mail at info@maailmalapsed.ee.
If the user believes that their rights have been violated, they have the right to submit a complaint to the Estonian Data Protection Inspectorate.
The contact details of the Data Protection Inspectorate are available on the website www.aki.ee.
12. Changes to the Privacy Policy
This Privacy Policy may be updated from time to time. The current and up-to-date version is always available on the Website maailmalapsed.ee.