1. Data controller
This privacy policy governs the processing of personal data on the Koduvent (the "we") website koduvent.ee. Data controller: Koduvent, Tallinn, Estonia. Contact: info@koduvent.ee, phone +372 588 22 446.
2. What data we collect
We collect the following personal data:
- Contact form data — name, phone, email, message content.
- Technical data — IP address, browser type, pages visited, referrer URL.
- Cookies — session and preference cookies needed for the site to function.
3. Purpose and legal basis
- Quotes and customer service — legitimate interest (GDPR art 6(1)(f)) and contract performance.
- Website operation and analytics — legitimate interest in improving the service.
- Defending legal claims — compliance with obligations.
4. Retention period
Contact-form data is kept for up to 24 months. Transaction data is kept for 7 years (Accounting Act). Technical logs are kept for a maximum of 12 months.
5. Sharing with third parties
We share data only on a need-to-know basis with the following third parties:
- Formspree — contact-form delivery (USA, processor).
- Lovable Cloud / Supabase — database and hosting provider (EU).
- Google Maps — map display on the site (USA).
We do not sell or rent your personal data to third parties.
6. Cookies
The website uses cookies for the following purposes:
- Necessary cookies — session and language preference. Cannot be disabled.
- Preference cookies — UI settings.
- Analytics cookies — anonymous visitor statistics (when used).
You can delete or block cookies in your browser — this may affect site functionality.
7. Your rights
Under GDPR you have the right to:
- Be informed about the processing of your data.
- Request correction or deletion of your data.
- Restrict processing or object to it.
- Receive your data for portability.
- Lodge a complaint with the Data Protection Inspectorate (aki.ee).
To exercise these rights, contact us by email: info@koduvent.ee.
8. Data security
We apply appropriate technical and organisational measures (HTTPS, RLS-based database security, access restrictions) to protect your data from loss and unauthorised access.
9. Changes
We reserve the right to amend this policy. We will announce material changes via the website.
See also terms of use.