How Foonika collects, uses and protects customer data.
The data controller is Kreiter Group OÜ, registrikood 16822721, KMKR EE102790085, Eha tee 19, Kelvingi küla, Viimsi vald, Harju maakond, 74018. For anything about your data: +372 5340 5772, foonika.ee@gmail.com.
For a booking: first and last name, email address, phone number, the time and room booked, and the amount paid. This is needed to fulfil the contract: without it the time cannot be held or a confirmation sent.
When signing in through eeID (Smart-ID, Mobile-ID, ID card): first and last name and a pseudonymous identifier computed from the personal identification code, so that the same person always reaches their own account. We do not store the personal identification code itself. In addition, an email address and, optionally, a phone number.
When accepting the agreement: the time of acceptance, the version of the agreement, the language and checksum of the text shown, how and when the person signed in, the IP address and the browser identifier. These records prove who accepted which text.
About the payment: its status, the amount and the transaction number. We never see or store bank or card details; those stay inside the payment provider's environment.
About website use: technical logs, including the IP address, and cookies that keep you signed in and remember your language. These are needed for the site to work safely.
Booking and payment data is processed to perform the contract. Accounting records are kept because the law requires it. Security and fraud-prevention logs rest on legitimate interest. Marketing messages are sent only with consent, and consent can be withdrawn at any time.
For payments the processor is Maksekeskus AS (registrikood 12268475, Liivalaia 45, 10145 Tallinn). Only what is needed for the payment is passed on: the amount, the reference and the customer's email address. Maksekeskus's own terms are on their site at https://maksekeskus.ee.
The website and database are hosted with a server provider inside the European Union.
Identity is verified through the eeID service (Eesti Interneti SA, registry code 90010019, Paldiski mnt 80, Tallinn): it passes us the name and personal identification code, from which we compute the pseudonymous identifier.
Confirmation emails are sent through an email service.
A studio staff member receives a message about each new booking; it contains the time and the customer's name.
Data is not passed to anyone else, except where the law requires it.
Accounting records are kept for seven years, as the law requires.
Account data is kept for as long as the account exists. On a deletion request we remove everything except what accounting rules oblige us to keep.
Records of accepting the agreement are kept while the agreement is in force and, after it ends, until claims arising from it are time-barred, also if the account is deleted.
Technical logs are kept for up to 12 months.
You may ask what data we hold about you, have it corrected or deleted, restrict its processing, and receive it in a machine-readable form.
An email to foonika.ee@gmail.com is enough.
If you believe your data is handled wrongly, you may contact the Estonian Data Protection Inspectorate (Tatari 39, Tallinn, info@aki.ee).
The site currently uses only cookies it needs to work: the sign-in session and the language choice. There are no analytics or advertising cookies. If they are added, we will ask for separate consent before using them and update this page.
2026-10-20