The controller of customer data is OÜ Capfield, registry code 14042628, Ahtri 9, 10151 Tallinn, e-mail, which owns the Nautica shopping centre, Lasnamäe Centrum and Lasnamäe Prisma. 

Protection and Security of Personal Data

OÜ Capfield undertakes to protect the personal data of customers and users and their privacy. Our activities are in accordance with all relevant activities and the relevant legislation of the European Union and the laws of the Republic of Estonia, including the Regulation (EU) 2016/679 of the European Parliament and of the Council.

OÜ Capfield implements all precautionary measures (incl. administrative, technical and physical measures) to protect the collected personal data. Only authorised persons have access to change and process the data. Personal data is stored on servers located in the territory of a Member State of the European Union or in countries that have joined the European Economic Area.

Types of Personal Data and Purposes of Processing

We collect and process:

Personal data directly or indirectly related to a natural person, which may be a given name and surname, personal identification code, address, phone number, postal code, e-mail address. We collect and process personal data to fulfil agreements related to the person, contact them, send information related to marketing activities, or fulfil obligations arising from laws.

Non-personal data that cannot be linked to a specific person. Such data may include data on actions or activity on websites related to the Capfield (using cookies). It is collected for web statistics and provides better customer service.

Third Parties and Authorised Persons

We do not transfer, sell or disclose your data to third parties without your prior consent, except in cases provided by laws and regulations.

OÜ Capfield has the right to transfer personal data to companies belonging to the same group as OÜ Capfield.

Data Retention

Due to the obligation set out in the Accounting Act to have proof of transactions, personalised personal data is stored for up to 7 years after the last interaction with us. Interactions include responding to direct marketing through viewing or through clicking on a link.

Non-personalised technical data collected by websites and service environments will be stored indefinitely.

Reviewing Data, Correcting It and Termination of Processing It

You have the right to withdraw your consent at any time in accordance with the conditions set out in the Personal Data Protection Act. Under the conditions prescribed by the law, you have the right to receive information about your personal data and its processing, to request the correction of incorrect personal data, and, if processing of personal data is not permitted by law, to demand the termination of processing it, closure and deletion of your personal data.

If you have any questions regarding your data or this privacy policy, please contact In case of a dispute, you also have the right to contact the Data Protection Inspectorate (Väike-Ameerika 19, 10129 Tallinn;;, or a competent court.

Terms and Conditions of the Privacy Policy, and Changes to Them

By using the websites and/or service environments, you have read and agree to these principles, terms and conditions. Capfield OÜ reserves the right to change the terms and conditions of the privacy policy by notifying the customers of it on the website, by e-mail or in any other way.