Last updated: 23.10.2025

Your privacy is important to us. This Privacy Policy (“Policy”) explains how Museum solutions OÜ, registry code 17318232, with registered office at Rataskaevu tn 10, 10123 Tallinn, Estonia (“we”, “us”, “our”, “Company”) collects, uses, and protects your personal data when you visit our website https://museumofillusions.ee/ (“Site”) or purchase our tickets and services (“Services”).
We act as the data controller for all personal data processed in connection with our Services.

If you have any questions about this Policy or how we process your personal data, please contact us at:
Phone number: +3725264212
E-mail: info@museumofillusions.ee

1. Information We Collect

We collect personal data that is necessary for providing our Services, complying with legal obligations, and improving your experience.

Categories of data collected:
Contact and identification data: name, surname, email address, phone number.

Purchase data: billing information, ticket order details, payment confirmation, date and time of visit.

Technical data: IP address, browser type, device type, and usage logs (collected automatically for security and analytics purposes).

Communication data: correspondence and inquiries sent to us.

We do not request or process any special category (“sensitive”) personal data such as health, religion, or political beliefs.

2. Legal Bases for Processing

We process your personal data under one or more of the following legal bases:
Contract performance: to provide Services you purchase or request (Article 6(1)(b) GDPR).

Legal obligation: to comply with accounting, taxation, and consumer protection laws (Article 6(1)(c) GDPR).

Legitimate interests: for internal administration, fraud prevention, and security (Article 6(1)(f) GDPR).

Consent: for optional communications such as newsletters or marketing (Article 6(1)(a) GDPR).

3. How We Use Your Information

We may use your personal data for the following purposes:
To process and confirm ticket purchases.

To provide customer support and respond to your inquiries.

To send service-related communications (for example, visit confirmations or updates).

To ensure security and prevent misuse or fraud.

To comply with legal and regulatory obligations.

With your consent, to send marketing messages (you can withdraw your consent at any time).

We do not sell or rent your personal data to third parties.

4. Cookies and Analytics

Our Site may use essential cookies to enable functionality (such as ticket ordering) and analytical cookies (e.g., Google Analytics) to improve usability.
Before placing non-essential cookies, we will ask for your explicit consent through a cookie banner in accordance with the Electronic Communications Act (Elektroonilise side seadus).
You can manage or withdraw your consent at any time through your browser settings.

5. Data from Minors

Our Site and Services are not directed to persons under 18 years of age. We do not knowingly collect personal data from minors.
If you believe we have collected data from a child, please contact us immediately at info@museumofillusions.ee; we will promptly delete it.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this Policy or as required by law:
Ticket and transaction data: retained 7 years (for accounting compliance).

Contact inquiries: retained up to 12 months after resolution.

Marketing data: retained until you withdraw consent.

After these periods, your data will be securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and secure backups.

However, please note that no internet transmission is completely secure. We cannot guarantee absolute protection of your data, but we continuously monitor and update our security measures to minimise risks.

8. Your Rights

Under the EU General Data Protection Regulation (GDPR) and Estonian law, you have the following rights:
Right of access: obtain confirmation and a copy of your personal data.

Right to rectification: correct inaccurate or incomplete data.

Right to erasure (“right to be forgotten”): request deletion of your data where legally possible.

Right to restriction: request limitation of processing in certain cases.

Right to data portability: receive your data in a structured, commonly used format.

Right to object: object to processing based on legitimate interests or direct marketing.

Right to withdraw consent: if processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at info@museumofillusions.ee.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
https://www.aki.ee/en
Email: info@aki.ee

9. Sharing and Transfers

We may share your data only with trusted service providers who process data on our behalf (e.g., payment processors, IT hosting, email systems).
All such processors are bound by contractual obligations to protect your data and act only under our instructions.
We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards (such as EU Standard Contractual Clauses) are in place.

10. Policy Updates

We may update this Policy from time to time. The updated version will always be published on our Site with the date of the last revision.
If changes are significant, we will provide a clear notice or request renewed consent where required by law.

11. Acceptance

By using our Site or Services, you confirm that you have read, understood, and agree to this Privacy Policy.
If you do not agree, please discontinue use of our Site.

12. Contact

For questions or requests about your personal data, please contact us:
Museum solutions OU
Rataskaevu tn 10, 10123 Tallinn, Estonia
Registry number 17318232
Phone number: +3725264212
E-mail: info@museumofillusions.ee