Privacy policy

1. Controller

Karusmarja Catering OÜ
Registry code: 16855956
VAT: EE102723463
Address: Ehitajate tee 13, 76606 Keila, Estonia
E-mail: hello@maitsetemaja.ee
Phone: +372 5554 4072

2. What data we collect

2.1. Contact form

On /kontakt/ and /en/contact/ (Contact Form 7, form 55) you can send your name, e-mail, subject and message. Messages are delivered to hello@maitsetemaja.ee; we reply to your e-mail address (Reply-To).

2.2. Table booking

To make a booking, the “Book a table” plugin collects your name, e-mail address, phone number, date, time, party size and an optional note. The data is stored on our server and used in confirmation and reminder e-mails.

2.3. Technical data and cookies

The site uses WordPress and Yoast SEO. These may set technical cookies or similar identifiers (e.g. for session and performance) that are needed for the site to work.

For statistics we use Google Analytics 4 via Google Site Kit (Google tag GT-PZMQ223M, linked to measurement ID G-G5P2FG0TQG). Analytics cookies and similar storage (analytics_storage and other Consent Mode v2 signals) are enabled only after you accept on the cookie banner (“Accept”). If you reject or make no choice, analytics stays denied by default. Your choice is stored in the first-party cookie mm_cookie_consent for up to 12 months; you can change it via the footer link “Cookie settings”.

2.4. Google Maps and reviews

On the contact page the Google Map loads only after you click “Show map”. The English contact page may embed the map directly. The reviews block shows Google reviews (fetched by our server via the Google Places API and cached) together with reviews we have selected. When you interact, Google’s services may process your IP and device data under Google’s terms.

2.5. Staff roster (MMGraafik)

The /mmgraafik/ app is for staff (shifts, catering events). It is not a public visitor service. Staff have been informed about the processing and enter their own data themselves. If Google Calendar is connected, related calendar data is processed between Google and our server.

3. Purposes and legal bases

• Answering enquiries and bookings – contract or pre-contractual steps / legitimate interest.
• Site security, performance and statistics – legitimate interest; consent where required (cookies).
• Compliance with legal obligations (e.g. accounting).

4. Retention

Personal data (including contact-form messages, bookings and other enquiries) is kept for up to 12 months, then deleted or anonymised, unless a longer period is required to meet legal duties (e.g. accounting). Analytics data is kept according to Google’s and our settings, but no longer than our retention period of 12 months.

5. Recipients and transfers

Data may be processed by our web hosting provider (Zone), e-mail service, Google (Analytics, Maps, reviews, Calendar if connected) and technical providers. For providers outside the EEA, appropriate safeguards (e.g. SCCs) apply where the provider offers them.

6. Your rights

Under the GDPR you have the right to information, access, rectification or erasure, restriction, objection and data portability where applicable, and to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

To exercise your rights, write to: hello@maitsetemaja.ee.

7. Children’s data

The site is not aimed at children under 13. We do not knowingly collect children’s data.

8. Changes

We may update this policy. The new version will be published on this page with a date.