Processing of personal data


The controller of personal data is Hawaii Express OÜ, Harju County, Tallinn, Pirita district, Pirita tee 102, 12011,

Purpose and legal basis of processing personal data

The legal basis derives from Article 6 of the GDPR, and it is consent (paragraph 1 p a), execution of the contract, and taking measures prior to the conclusion of the contract (paragraph 1 p b). By entering data in the web store and with the corresponding confirmation, the Consumer grants the right to collect and process the Consumer's personal data (name, contact phone, parcel delivery and/or home address, e-mail address) and forward the personal data to the logistics partner for delivery.

If the Consumer does not provide personal data to complete the transaction, this means the absence of a declaration of intent to complete the transaction, and the transaction will not be concluded. If the Consumer does not provide personal data for the delivery of the goods, the goods will not be delivered, and the Consumer must physically pick up the goods themselves.

The Consumer has the right to withdraw the given consent at any time by informing about it by e-mail to

Data storage period

Personal data is stored keeping in mind possible deadlines for filing claims arising from civil law transactions, including taking into account possible claims for delivery of goods, compliance with their quality, and possible crimes committed. When determining this deadline, Hawaii Express is based on the wording of the rationale provided in the summary of the monitoring prepared by DPI "Complying with the requirements of the Personal Data Protection Act in instant loan offices" (located here) Given the possibility that the obligations may have been willfully breached, Hawaii Express uses a 10-year statute of limitations for outstanding obligations. In order not to place persons who have fulfilled the obligation in an unequal situation (insofar as § 11 (7) point 4 of the Personal Data Protection Act allows data to be published within three years after the fulfillment of the claim), in the situation where the obligation is unfulfilled, but expired, Hawaii Express bases its determination of the maximum period of disclosure, taking into account the principle of proportionality, 13 years from the time the claim becomes due. When claims are collected through the court, the limitation period for the claim starts from the entry into force of the judgment. Pursuant to § 157 of the General Part of the Civil Code Act, the statute of limitations for a claim recognized by a judgment is ten years, which starts from the entry into force of the judgment or the issuance of another enforcement document, but not before the claim becomes enforceable.

Prohibition of use, correction, or deletion of personal data

The Consumer shall have the right at any time to prohibit the collection and use of their personal information except to the extent required to recover a claim under the contract or to deliver the goods. The Consumer has the right to request access to the data and demand their correction or deletion. In case of the existence of such a wish, it must be reported by e-mail to

The use of electronic personal data for direct mail takes place only if the Consumer has given separate consent for this on the website under their account settings.

When making purchases with encrypted data communication banks, the Consumer ensures the security of their personal bank identifiers, and HJ Web Store does not have access to them.

Filing of complaints

The data subject would have the right to submit a complaint against the data processor to the Data Protection Inspectorate ☎ 627 4135; ✉