01
Controller
Grenda OÜ (registry code 12423467), Paljandi tn 3, 13516 Tallinn, Estonia. Privacy enquiries: info@grenda.ee.
Privacy
Privacy and personal data
Grenda OÜ is the controller of personal data processed in connection with the Anatomic Mattress website. This notice explains clearly when and why data may be processed.
06.10.2026
02
Data we process and its source
If you email us, we process your name, contact details, message and the correspondence needed to reply. The website has no form that sends data to Grenda OÜ; an email link opens the mail application on your device. The hosting provider may process IP address, request time, browser identifier and requested address in security and error logs.
03
Purpose and legal basis
We answer contract-related enquiries and, at your request, prepare a contract under GDPR Article 6(1)(b). We answer other enquiries and use technical logs to protect the security and reliability of the site on the basis of our legitimate interests (Article 6(1)(f)). We meet statutory obligations under Article 6(1)(c). We do not use the data for direct marketing, profiling or automated decisions.
04
Providing data
Sending an email is voluntary, but we need valid contact details in order to reply. Please do not send health data or other special-category data unless it is strictly necessary to resolve your question.
05
Retention
We retain ordinary enquiry correspondence for up to 12 months after the conversation ends. Contract and accounting records are retained for seven years after the end of the relevant financial year where required by law. Technical security logs are normally kept for no more than 30 days, and longer only for a security incident, legal claim or statutory duty.
06
Recipients and transfers
Necessary email, hosting and IT providers may process data on our behalf, and authorities may receive it where required by law. We do not sell personal data. Transfers outside the European Economic Area take place only under an adequacy decision or another valid GDPR safeguard.
07
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. We normally respond within one month and may verify your identity before disclosing data.
08
Administrator accounts
Authorised administrators’ usernames, names, email addresses and password hashes are stored in the WordPress database to manage the website. Access is withdrawn when it is no longer needed. Backup copies expire under the hosting provider’s retention schedule.
09
Contact
To exercise your data-protection rights, email info@grenda.ee.
