Privacy
Privacy notice
Last updated 2026-09-20
This notice explains what happens to personal data on the Movira Point of sale website and in the Movira Point of sale application. It describes what the software actually does — every line here was read from the code, not copied from a template.
Controller: Veebirebane OÜ, 16179716 · Viljandi mnt 75, Õssu küla, Kambja vald, 61713 Tartu maakond · info@movira.ee · +372 56 612 670.
What this website collects
There are no advertising trackers and no profiling on this site. We count visits only if you allow it in the cookie notice: without that consent no request is made to Google at all, and we know nothing about you beyond what the contact form tells us.
| Data | Why | Where it goes |
|---|---|---|
| Name, email, message (and company / phone, if the form asks) | To answer your enquiry | Sent to our mailbox as an email; not stored in a database |
| IP address and browser identifier | Rate limiting: at most five submissions per hour | Server memory, about an hour |
| Bot check (Cloudflare Turnstile) | So the form is not filled in by a robot | Cloudflare receives your IP address and technical browser data |
| Language choice (NEXT_LOCALE cookie) | So the site opens in the language you chose | Stays in your browser for a year |
| Your answer to the cookie notice (movira_consent cookie) | So we do not ask again on every page | Stays in your browser for six months |
| Visit statistics (Google Analytics, _ga and _ga_* cookies) — ONLY with your consent | To see which pages are of interest and where visitors came from | Google Ireland Limited; the cookies stay in your browser for up to two years |
The legal basis is our legitimate interest in answering enquiries and keeping the form usable, and — where you are asking about our service — steps taken at your request before a contract.
The legal basis for visit statistics is your consent. You can withdraw it at any time from the “Cookies” link in the footer; withdrawal does not affect processing done before it.
When you use Movira Point of sale
Two different roles matter here. For data you enter about your own customers, employees and partners, you are the controller and we are the processor — we process it to run the service for you, and for no other purpose. For your own account (name, email, password, sign-in log) we are the controller.
The register holds sales documents and shifts. Customer details (name, email) are recorded only when the cashier adds them — for an invoice or a loyalty card. Cashier actions are recorded because the till has to be auditable afterwards.
We do not sell data, we do not hand it to advertisers, and we do not use customer data to train models.
Who else sees the data
- Hosting: Hetzner, in a data centre in Helsinki, Finland. The data stays in the European Union.
- Email delivery: Forward Email, which relays our outgoing mail.
- Bot protection on forms and sign-in: Cloudflare Turnstile.
- Visit statistics, if you allow it: Google Ireland Limited (Google Analytics and Tag Manager). Google may process the data outside the European Union as well, under the European Commission’s standard contractual clauses and the EU–US Data Privacy Framework. Without your consent the Google script is not loaded at all.
- Accounting software, when the integration is enabled: Merit Aktiva, SmartAccounts. Sales documents go there.
Nobody else. Authorities receive data only when the law requires it.
How long it is kept
- Contact form emails: in our mailbox until the correspondence is no longer needed.
- Application data: for as long as the customer relationship lasts. When the contract ends, the data is deleted or returned at the customer’s choice.
- Accounting documents: for the period required by law, even when the contract has ended.
- Technical logs (errors, sign-in attempts): a short period, so that faults and abuse can be investigated.
- Visit statistics: up to 14 months in Google Analytics. When you withdraw consent, the _ga cookies are deleted from your browser immediately.
Your rights
You can ask what data we hold about you, have it corrected, deleted or its use restricted, object to processing, and receive your data in a machine-readable form. Write to us and we will answer within a month.
If your data is in a Movira application that a company uses (your employer, your landlord, the shop that sent you a parcel), that company decides about the data — write to them first. We will help them, and if you write to us we will point you in the right direction.
If you believe we are handling your data wrongly, you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
Changes
We update this notice whenever the software starts or stops doing something with personal data. The date at the top always shows the last substantive change. Questions: info@movira.ee.