1. Controller
The controller responsible for processing personal data in the Webshop www.megaluks.eu

is:

Bright Lab OÜ
Registry code: 14095493
Address: Üksnurme tee 8/1, 75501 Saku, Harju County, Estonia
VAT ID: EE101899709
E-mail: mv@bigibuy.ee


Phone: +372 504 1849


2. Processed personal data

Bright Lab OÜ processes the following categories of personal data:

• name, contact details
• delivery and billing information
• order and payment history
• communication with customer support
• technical data (IP address, device info, cookies)
• preferences and shopping behaviour


3. Legal bases and purposes

Data is processed based on:

Contract performance

• processing orders
• making deliveries
• handling returns and warranties

Legitimate interests

• improving user experience
• preventing fraud
• ensuring Webshop security
• customer service optimisation
• personalized offers (where permitted)

Consent

• sending newsletters
• analytics and marketing cookies

Legal obligation

• accounting and tax compliance
• consumer dispute handling


4. Data recipients

Personal data may be shared with:

• payment service providers (Maksekeskus, Montonio, Paysera)
• delivery partners (Omniva, Itella, DPD, Venipak, DHL, etc.)
• IT and hosting providers
• logistics partners
• accounting services
• authorities where required by law

All partners follow GDPR requirements.


5. Data retention

• Accounting data: 7 years
• Order history: as long as necessary
• Marketing data: until consent withdrawal
• Technical logs: according to security needs


6. Cookies

The Webshop uses cookies for functionality, analytics and marketing.
Users can control cookie settings in their browser.


7. Data subject rights

Customers have the right to:

• access their personal data
• request correction or deletion
• restrict processing
• object to processing
• withdraw consent
• file a complaint to the supervisory authority

Requests can be submitted to: mv@bigibuy.ee

Supervisory authority in Estonia:
Andmekaitse Inspektsioon (Data Protection Inspectorate)
www.aki.ee


8. Changes

Bright Lab OÜ may update this Privacy Policy. The latest version is always available in the Webshop.