Privacy Policy & Terms of Use

This Privacy Policy describes how Lumi Kodud Aiandi OÜ / Lumi Kodud Manufaktuuri OÜ / LiveOn Päevalille OÜ (hereinafter jointly referred to as Lumi Kodud) collect, use and protect personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable laws of the Republic of Estonia.

By using our website, you agree to the collection and use of your data in accordance with this Privacy Policy.

This Privacy Policy applies to the website www.lumikodud.ee and its visitors, as well as to personal data collected through other channels (including contracts, email, phone, and management systems).

Our website may contain links to third-party websites that are not operated by us. When you leave our website, the privacy policies of the respective third parties apply. We are not responsible for the content or data processing practices of such websites.

1. Collection of Personal Data and Sources

We collect personal data that you knowingly and voluntarily provide when using our services, participating in campaigns, or contacting us, as well as technical data that your devices transmit when accessing our website and services.

Your personal data may reach us when you contact us by phone, email or online chat; browse www.lumikodud.ee; comment, like or share content on our social media channels; join our waiting list; or submit applications or additional information via our website.

2. Types of Personal Data We Collect

Lumi Kodud processes personal data only to the extent necessary for providing services, ensuring the proper functioning of the website, communication, and fulfilling legal obligations.

The processed personal data may include first and last name, personal identification code (where necessary, particularly in contractual relationships and for compliance with legal obligations), email address, postal address (country, county, city), phone number, and communication or chat history.

When using our website, we also collect technical data, including information about your device, web browser, IP address, internet service provider, date and time of visits, entry and exit pages, and interactions on the website. This information is collected via log files and is used for website administration, security, usage statistics, trend analysis, and service improvement. Log data is not used to directly identify individuals.

Our website also uses cookies to ensure essential functionality, store user preferences, and improve user experience. You may restrict the use of cookies through your browser settings; however, this may affect the proper functioning of the website.

3. Purposes and Legal Bases for Processing Personal Data

Lumi Kodud primarily processes personal data for the conclusion, performance, and enforcement of rental agreements, as well as to ensure the functioning, development, and security of the website and services. Personal data is also used for customer communication, responding to inquiries, collecting feedback, developing services and products, and carrying out marketing activities.

The legal bases for processing personal data include the performance of a contract or taking steps prior to entering into a contract (GDPR Article 6(1)(b)), compliance with legal obligations (Article 6(1)(c)), and legitimate interests (Article 6(1)(f)), such as service development, security, and marketing activities.

4. Processing of Personal Data in Connection with Rental Agreements

In connection with the conclusion and performance of rental agreements, we process personal data, including but not limited to the following purposes:

1. Conducting background checks on prospective tenant(s), including inquiries to payment default registers, criminal records, court decision registers, land registers, and other publicly available databases, in order to assess creditworthiness;
2. Processing data of tenants, occupants, residents, and subtenants for the provision of utility, management, or maintenance services, as well as for managing access to and use of the building and property;
3. Using security cameras on the property and in common areas of the building to ensure order and safety;
4. Managing outstanding debts in cases of breach of contract, including data related to the existence of the debt, tenant’s name, date of birth or personal identification code, contact details, amount of debt, and the period during which the debt arose and ended.

Additional information regarding the processing of personal data related to rental agreements can be found in the annex to the rental agreement.

5. Marketing and Product Development

Lumi Kodud consider the analysis of personal data for marketing and product development purposes to be a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

In marketing and product development, we use feedback and preferences shared by clients who have contacted us. If you have expressed a wish to receive marketing or rental offers from us, we use your contact details to send relevant information and offers. You may unsubscribe from such communications at any time by following the instructions provided in our emails.

6. Disclosure of Personal Data to Third Parties

Lumi Kodud may disclose personal data to companies within the same group and to investors for data management purposes; to providers of management, utility, administrative, or maintenance services; to debt collection and debt management service providers; as well as to our marketing and IT service providers.

All third parties process personal data solely in accordance with our instructions and applicable data protection requirements.

7. How We Use Personal Data

We may use collected personal data for the following purposes:

• maintaining, managing, developing, and personalising the website;
• compiling statistics and usage analytics;
• identifying you and communicating with you via phone, email, or other channels;
• providing information about services and offers and collecting feedback;
• preventing fraud and ensuring website security;
• enabling communication via social media;
• using communication history to improve customer service quality;
• developing services and products and improving functionality;
• assessing the effectiveness of advertising and marketing activities.

8. Data Retention, Rights and Security

Personal data is retained only for as long as necessary to fulfil the purposes of processing or to comply with legal obligations. Individuals have all rights granted under the GDPR, including the right to access their data, request correction, deletion, or restriction of processing.

None of our products or services are directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. If we become aware that such data has been collected, it will be deleted without delay.

Lumi Kodud implements reasonable technical and organisational measures to ensure the security of personal data.

9. Amendments to the Privacy Policy

We reserve the right to amend this Privacy Policy when necessary. The updated version will be published on the website together with the date of the latest amendment.

Last updated: 04.02.2026