Privay policy
1. Introduction
This privacy policy applies to Rendixi.me OÜ, which is registered and located in Tallinn, Estonia. We offer:
- Short-term accommodation (three properties in Pärnu, including two in the same location).
- Commercial space rental (two properties in Tallinn).
This privacy policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
2. Data we collect
When you use our services or website, we may collect the following data:
- Personal data: name, email address, phone number, billing address, ID card or passport details (required by Estonian law for accommodation).
- Reservation details: check-in and check-out dates, rented property, number of guests/tenants.
- Payment details: these are processed securely by third parties (Bouk hotel software, Montonio payment processor). We do not store your card details.
- Technical data: IP address, device type, cookies, and website usage data (for analysis).
3. Purpose of processing and legal basis
We process your personal data for the following purposes:
- Contract performance: managing reservations and rental agreements.
- Legal obligation: registration of guest data for the provision of accommodation services in accordance with § 24 of the Estonian Tourism Act, which requires us to retain guest data for at least two years.
- Legitimate interests: prevention of fraud, maintenance of website functionality, and smooth provision of services.
4. Data sharing
- We may share your data with the following parties:
- Booking platforms (Bouk hotel software)
- Secure payment processors and banking institutions.
- Estonian authorities (e.g., Police and Border Guard Board, Tax and Customs Board), if required by law.
We will never sell your personal data to third parties.
5. Data retention
- Guest data: stored for 2 years in accordance with Estonian tourism law.
- Financial data: stored for 7 years in accordance with Estonian accounting and tax laws.
- Technical data/cookies: stored in accordance with the settings of the analytics service provider (e.g. Google Analytics for a maximum of 26 months).
6. Your rights
Under the GDPR, you have the right to:
- Access, correct, or delete your personal data.
- Restrict or prohibit the processing of your data.
- Request data portability.
- Lodge a complaint with the Data Protection Authority (Andmekaitse Inspektsioon).
7. Security
We implement technical and organizational measures to protect personal data, including encryption, restricted access, and secure data storage.
8. Cookies and tracking
Our website uses cookies for the following purposes:
- Ensuring functionality (session cookies).
- Analyzing website traffic (analytical cookies).
Improving user experience.
Cookies can be disabled in your browser settings.
9. Contact us
If you have any questions or wish to exercise your rights, please contact us:
Rendixi.me OÜ
Tallinn, Estonia, Pille tn 9/3-53 Street, 10138
Email: Liis.laanesaar@gmail.com
Phone: +372 56156499
Supervisory authority:
Data Protection Inspectorate
10. Updates
This privacy policy will take effect on September 1, 2025. Updates will be published on our website.