Privacy policy

The controller of personal data is eServices Group OÜ (registry code 10858534), Toompuiestee 21, 10137 Tallinn, Estonia, e-mail info@eservices.ee, phone +372 661 6000.

We collect only the data that the visitor enters into a form.

• Order form: company name and registry code, contact person’s name, e-mail and phone, selected additional services.
• Contact form: name, e-mail, subject and message.
• Technical data: the time the form was submitted and the IP address, used only to detect and prevent abuse (spam, misuse of forms).

We use order form data to process the order, to contact the client and to issue an invoice. Contact form data is used only to answer the enquiry.

An automatic confirmation e-mail is sent to the person who submitted the form. For security reasons that e-mail does not repeat the free text of the form (name, company name, subject, message) — it contains only fixed text and data generated by us, such as the order number and the date. The content of the form itself is sent only to our own mailbox.

The data is not used for profiling or automated decision-making, and it is not sold or passed on to third parties for marketing purposes.

• Order data — conclusion and performance of a contract (GDPR Art 6(1)(b)).
• Contact form data — answering an enquiry at the client’s own request (GDPR Art 6(1)(b) and (f)).
• IP address and logs — legitimate interest in protecting the forms against abuse (GDPR Art 6(1)(f)).
• Accounting documents — legal obligation (GDPR Art 6(1)(c)).

Data is not shared with third parties, except processors necessary for providing the service:

• E-mail service provider — e-mail service in the European Union.
• Server hosting provider — hosting of the website and data in the European Union.

In addition, an obligation to disclose data may arise from law (e.g. a lawful request from a supervisory or law-enforcement authority).

• Website database — up to 7 days. Form submissions are kept in the website’s database only as a technical buffer and are then deleted automatically.
• Enquiries and related communication — in eServices Group’s client management system for as long as needed to answer the enquiry and to conclude a possible agreement; they are then deleted.
• Client data — for as long as the agreement is in force and, after it ends, 7 years under the Estonian Accounting Act.
• Abuse-prevention logs (IP addresses) — 6 months.

Once the period has passed, the data is deleted.

We use one technical cookie (lang_manual) to remember the visitor’s language preference for future visits. This cookie does not track the user on other websites and does not collect personal data. If analytics are added, this chapter will be updated accordingly and separate consent will be asked for it.

You have the right to access the data collected about you, to request its correction or deletion, to restrict processing, to object to processing and to receive your data in a machine-readable form. These rights can be exercised to the extent that they do not conflict with obligations arising from law (e.g. the accounting retention period).

A request can be submitted to info@eservices.ee. If you believe that we have processed your data unlawfully, you have the right to turn to the Estonian Data Protection Inspectorate.