Privacy policy
1. General information
This privacy policy describes how KUJI OÜ (registry code 17205924, address: Lõõtsa tn 4, 11415 Tallinn, Harju County) collects, uses and protects your personal data when using the gala.ee website and related services.
The responsible data controller is KUJI OÜ. For questions, please contact: infosushi@gala.ee
2. Data collected
We collect the following personal data for order processing and service provision:
- Name, email address, phone number — when creating an account or placing an order
- Delivery address — for courier orders
- Order history — to ensure account functionality and order tracking
- Payment information — payment processing is handled through the Montonio payment environment
3. Purpose of data use
We use your personal data for the following purposes:
- Order processing and delivery
- Order-related communication (confirmations, notifications)
- Account functionality (order history, saved addresses)
- Service improvement and development
- Fulfilling legal obligations
4. Data sharing with third parties
We do not sell or share your personal data with third parties, except in the following cases:
- Payment processing — Montonio Finance OÜ (bank transfers, cards, Apple Pay, etc.)
- Delivery — courier partners for order fulfillment
- Legal obligations — when the duty or right to disclose data arises from legislation
5. Cookies
We use cookies essential for website functionality (session, language preference, cart contents). Analytics cookies are used only with your consent.
6. Data retention
We retain your personal data for as long as necessary to provide services or fulfill legal obligations. When you delete your account, we will remove your personal data within a reasonable time, except for data we are required to retain for accounting or other legal purposes.
7. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right to access your personal data and obtain information about its processing
- Right to request correction or deletion of personal data
- Right to restrict processing of personal data
- Right to object to processing of personal data
- Right to data portability
To exercise your rights, contact us at infosushi@gala.ee. You also have the right to file a complaint with the Data Protection Inspectorate (www.aki.ee).
8. Data security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. Payment processing is handled through the secure Montonio payment environment and we do not store your bank card data.
KUJI OÜ · Reg. nr 17205924 · Lõõtsa tn 4, 11415 Tallinn · infosushi@gala.ee
