Privacy Policy EN

Privacy Policy

Last updated: September 15, 2026

  1. Controller

Riva Terra OÜ is responsible for processing personal data as described in this Privacy Policy.

Company Details

Company Name: Riva Terra OÜ

Commercial Register Number:

EMTAK Activity Code:

Address:

Narva mnt 5

10117 Tallinn

Estonia

Contact:

+31 6 49 390 762

Email: info@rivaterra.com

  1. Applicability

This Privacy Policy applies to all visitors to our website, customers, and other individuals whose personal data Riva Terra OÜ processes through its website or services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable European privacy legislation.

  1. What Personal Data Do We Process?

Depending on your use of our website, we may process the following personal data:

  • Name
  • Address details
  • Billing address
  • Delivery address
  • Phone number
  • Email address
  • Payment details (only to the extent necessary to process payments)
  • Order history
  • Communication with our customer service
  • IP address
  • Browser information
  • Device details
  • Technical log data
  • Cookie data

We only process personal data that is necessary for the purposes described in this Privacy Policy.

  1. Why Do We Use Your Personal Data?

We process personal data for purposes including:

  • Processing orders
  • Delivering products
  • Processing payments
  • Customer service
  • Returns and refunds
  • Fraud prevention
  • Securing our website
  • Improving our website
  • Statutory administration
  • Communication regarding your order
  • Marketing (where you have provided consent or where permitted by law)
  1. Legal Basis for Processing

We process personal data only when there is a valid legal basis, including:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests
  • Your consent (for example, for marketing cookies or newsletters)
  1. Payments

Payments are processed securely through recognized third-party payment service providers.

Depending on the chosen payment method, we may use:

  • Stripe
  • Mollie
  • PayPal
  • Airwallex
  • Other recognized payment providers

Riva Terra OÜ does not process or store full payment card details, such as full credit card numbers or security codes.

The processing of payment details is governed by the privacy policy of the respective payment provider.

  1. Sharing Personal Data

We do not sell your personal data.

Personal data may only be shared with third parties when necessary for our services, such as:

  • Payment providers
  • Logistics partners
  • Hosting providers
  • IT service providers
  • Analytics and security service providers
  • Accounting service providers
  • Government authorities when legally required

All processors are contractually obliged to handle personal data with care.

  1. International Transfers

When personal data is processed outside the European Economic Area (EEA), it only occurs if a valid legal basis exists, such as an adequacy decision by the European Commission or appropriate contractual safeguards.

  1. Retention Periods

We do not retain personal data longer than necessary for the purposes for which it was collected.

Data that we must retain under statutory obligations, such as tax records, will be kept for the legally mandated period.

After the retention period expires, personal data will be deleted or anonymized.

  1. Security

Riva Terra OÜ takes appropriate technical and organizational measures to protect personal data against:

  • Loss
  • Unauthorized access
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

Despite all security measures, no internet transmission can guarantee absolute security.

  1. Cookies

Our website uses cookies and similar technologies.

Cookies are used for purposes including:

  • Proper functioning of the website
  • Remembering preferences
  • Shopping cart functionality
  • Security
  • Analytics
  • Improving user experience
  • Marketing (if consent has been granted)

For more information, please consult our Cookie Policy.

  1. Minors

Our website and services are not directed at persons under the age of 18.

We do not knowingly collect personal data from minors.

If we discover that personal data of a minor has been collected without valid consent, it will be deleted as soon as possible.

  1. Your Rights

To the extent that the GDPR applies to your situation, you have the right to:

  • Request access to your personal data
  • Correct personal data
  • Have personal data deleted
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw previously given consent

Requests can be submitted via: info@rivaterra.com

We will respond within statutory timelines.

  1. Complaints

If you have a complaint regarding the processing of your personal data, please contact us first.

Additionally, you have the right to lodge a complaint with the competent data protection supervisory authority.

  1. Changes

Riva Terra OÜ reserves the right to amend this Privacy Policy at any time.

The most recent version will always be published on our website.

In the event of major changes, we will inform customers when required by law.

  1. Contact

Riva Terra OÜ

Narva mnt 5

10117 Tallinn

Estonia

Email: info@rivaterra.com