Privacy Policy

This following privacy policy:

– explains what we do with the personal data of the Visitor;
– explains how we collect, use and protect the personal data of the Visitor;
– helps the Visitor understand how their personal data is collected and used and what their rights are in relation to their personal data.

1. General

The chief processor of personal data is OÜ Anvol, registry code 10064863, address Kaldase tee 4, 74117 Maardu.
When processing the personal data of Visitors, OÜ Anvol follows the legislation of Estonia and the European Union.
All personal data held by OÜ Anvol is collected directly from the Visitor.
We use the personal data for the purposes we have collected such data for and to the extent necessary to fulfil these purposes.
OÜ Anvol may change the privacy policy at any time in accordance with the requirements of personal data protection.

2. Processing of personal data for communication purposes

Visitors can submit personal data via contact forms or newsletter subscription forms.
For the purposes of communication, OÜ Anvol may transmit personal data to service providers.
Visitors voluntarily consent to the processing of their personal data for these purposes.
Consent can be withdrawn at any time by unsubscribing or contacting OÜ Anvol.

3. Joint Data Processors

The joint data processors of the data subject’s personal data within the Anvol Group are:

  • OÜ Anvol, registry code 10064863, address Harju County, Maardu City, Kaldase tee 4, 74114, email: [email protected]. OÜ Anvol operates the e-shops at www.xsmanguasjad.ee, www.xsrotallietas.lv, www.xszaislai.lt and XS Mänguasjad retail stores in Estonia.
  • SIA Anvol, registry code 40003371192, address Noliktavu iela 7 Dreiliņi, Stopiņu nov., LV-2130 Latvia, email: [email protected]. SIA Anvol operates XS Rotaļlietas retail stores in Latvia.
  • UAB Anvol, registry code 300085637, address Savanorių pr. 178A, Vilnius 03154 Lithuania, email: [email protected]. UAB Anvol operates XS Žaislai retail stores in Lithuania.
  • Anvol OY, registry code 2760806-7, address Urho Kekkosen katu 4-6E, Helsinki 00100 Finland, email: [email protected]. Anvol OY operates the e-shop at www.xslelut.fi and XS Lelut retail stores in Finland.
  • Anvol Nordic AB, registry code 559353-4711, address Wallingatan 34, 111 24 Stockholm, Sweden, email: [email protected]. Anvol Nordic AB operates the e-shop at www.xsleksaker.se and XS Leksaker retail stores in Sweden.

In certain cases, companies belonging to the Anvol Group may also act as independent data controllers of the data subject’s personal data.

4. Rights of the Visitor

Visitors have the following rights:
a) Contact OÜ Anvol with questions related to personal data;
b) Gain access to their personal data;
c) Update their personal data;
d) Request deletion of their personal data;
e) Request restriction or object to processing;
f) Request transfer of personal data to another processor;
g) Contact the Data Protection Officer at [email protected];
h) Turn to the Data Protection Inspectorate with complaints.

5. Transfer of personal data

OÜ Anvol transmits the personal data of the Visitor to the following third parties:
a) Contracted transport or courier service providers;
b) Direct marketing service providers, with consent;
c) The accounting service provider to fulfil obligations arising from the law;
d) Contracted IT service providers;
e) Other parties to fulfil obligations arising from the law.

6. Data protection officer

a) The Data Protection Officer is Gert Gross.
b) The Data Protection Officer is available for contact by e-mail: [email protected]

7. Integrated and default data protection

a) OÜ Anvol will take all reasonable technical and organisational measures to ensure the security of personal data.
b) OÜ Anvol ensures that the information systems, other technologies and internal work systems used have the relevant and up-to-date security measures that are necessary for the secure processing of personal data.
c) All personal data gathered through this website will be treated as confidential information.

The recipients of personal data are:

Customer orders and invoices:
– Directo (business software)
Statistics collectors – for collection of information with the purpose of improving the user experience:
– Google Analytics
Marketing channels:
– Omnisend