1. Data Controller

Responsible data controller: Maxwave OÜ / Surfcenter.ee E-mail: info@surfcenter.ee

2. Data we collect

We only collect data required for fulfilling orders:

• name
• phone number
• e-mail
• delivery address
• payment information (processed securely via payment providers)

For lesson and rental inquiries, basic contact details are collected (Surfit OÜ).

3. How we use your data

• processing and delivering orders
• customer communication and warranty cases
• payment processing via Montonio
• accounting and legal obligations

4. Data retention

Order-related data is stored for up to 7 years (accounting regulations). General inquiries and communication for up to 24 months.

5. Data sharing

Data is shared only with service providers needed to fulfill your order:

• payment service providers
• shipping companies
• accounting service

We do not sell or share personal data with third parties for marketing purposes.

6. Your rights

You have the right to:

• request a copy of your data
• ask for correction or deletion (when legally permitted)
• file a complaint with the Data Protection Authority

7. Cookies

Surfcenter.ee uses only essential cookies required for website functionality. Analytics or marketing cookies are used only with user consent.