Privacy Policy

Vipex AS prioritises the protection of customer personal data. This policy explains how the company collects, processes and shares personal information. Personal data includes any information about an identifiable person, such as name, address, or email address.

Vipex AS, established in 1990, operates internationally in the manufacturing and trading of building materials, natural stone products, bathroom furniture, sanitary equipment, and household goods. Harma is the Vipex AS brand for the sanitaryware product catalogue, including shower cabins, mixers and bathroom furniture.

Vipex AS processes personal data of:

• Clients and supplier contact persons
• Job applicants

2.1 Processing purpose and legal basis

Client and supplier representative data is processed to provide products and services. The legal basis is the company's legitimate interest and contractual relationships. Job applicant data is processed to evaluate competence and suitability for employment; the legal basis is legitimate interest or applicant consent.

2.2 Data collection methods

Data is generally collected directly from subjects — client representatives, product users, job applicants, etc.

2.3 Types of personal data processed

The company may process:

• Contact information (name, address, phone, email)
• Age, date of birth, and gender
• Employment data (employer, job title, work preferences)
• Financial data
• Publicly available information from social networks

Vipex AS does not process special categories of personal data.

2.4 Data sharing

Business partners: data may be shared when necessary and lawful, based on legitimate interest. Government authorities: data may be disclosed when legally required. Mergers/acquisitions: acquirers receive all relevant company data, with confidentiality agreements established.

3.1 Marketing communications

Individuals may opt out by following unsubscribe instructions or contacting info@harma.ee.

3.2 General rights

Data subjects have the right to:

• Access their personal data
• Correct inaccurate information
• Request erasure under certain conditions
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

To exercise these rights, contact: info@harma.ee

4.1 Security measures

Vipex AS implements reasonable organisational, technical, and physical safeguards proportionate to the type of data and the risk of disclosure.

4.2 Retention period

Data is retained only as long as necessary for its collection purpose and to fulfil legal documentation requirements. When no longer needed, data is deleted or used only in pseudonymised or anonymised form.

5.1 Controller responsibilities

The controller must assess and manage processing risks and fulfil data subject notification duties.

5.2 Processor responsibilities

Processors must follow the controller's instructions.

Vipex AS may modify this policy at any time. Updates are published with a new version date. Significant changes may be communicated by email or website notice.

For questions or feedback, please contact:

• Email: info@harma.ee
• Address: Kriidi 10, 11415 Tallinn, Estonia
• Phone: +372 620 1000

All communications are treated as confidential. The company strives to resolve complaints quickly and fairly.