Privacy Policy

1. Controller

The controller of personal data is Ehitusabi 24 OÜ, registry code 14515618, VAT number EE102083611. Address: P. Kerese tn 42, Nõmme linnaosa, Tallinn, Harju maakond, 11212. Email: info@ehitusabi24.ee. Phone: +372 5750 3773.

2. What data we collect

When a work request is submitted we process the name, email address, phone number, the area and address of the site, the description of the work, the desired timing and any photos and documents added.

For a service provider account we process the company or sole proprietor name, registry code, contact person and billing details, the selected categories and service areas, offers, the plan, credits and the account usage history.

For a payment we process the order identifier, amount, currency, payment status and the transaction reference of the payment service provider. Ehitusabi24 does not store full card data or authentication data.

To ensure security and service reliability we may process the IP address, technical device and browser information, session data and security and activity logs.

3. Purposes and legal bases of processing

To prepare and perform the contract we process data for intermediating work requests, comparing offers, managing accounts, offering plans and credits, processing payments, issuing invoices and customer support.

To comply with a legal obligation we process accounting and transaction data to the extent required by law.

On the basis of legitimate interest we protect the service against fraud and misuse, resolve disputes, retain evidentiary logs and improve the security of the service. Consent for analytics used on the basis of consent can be withdrawn at any time.

4. Disclosure of data to service providers

Before contacts are revealed, a suitable service provider sees the type of work, the area, the description, the desired timing and the media added, but not the client's phone number, email or exact address.

The exact address and direct contacts are revealed only to the provider whose offer the client selects or whose site visit the client confirms. Revealing contacts is logged.

Please do not include data of third parties in photos and documents unless it is necessary for assessing the work.

5. Processors and other recipients

Data may be processed on our instructions by providers of web hosting, database, email, security, accounting and customer support services. Payment data is processed by the selected payment service provider under its own terms.

We disclose data to public authorities only where there is a legal obligation. We do not sell personal data and do not disclose it to third parties for their own independent marketing.

We prefer service providers located in the European Economic Area. Where data is processed outside the EEA, we use the safeguards required by applicable law.

6. Retention

We generally retain work requests, offers and related communication for up to three years after the request is closed, in order to resolve possible complaints and evidence agreements.

We retain core account data while the account is valid and for up to three years after the account is closed, unless longer retention is necessary due to a claim or legal obligation.

We retain accounting documents for seven years. Security logs are retained for the limited time necessary to fulfil their purpose. Once the retention period ends, data is deleted or anonymised.

7. Your rights

You have the right to receive information about your data, to request its correction or deletion, to restrict processing, to object to processing based on legitimate interest and to receive the data you have provided in a machine-readable form where the law so provides.

You can withdraw consent at any time without affecting the lawfulness of prior processing. Send requests to info@ehitusabi24.ee; we generally respond within one month.

If you believe your data has been processed unlawfully, you have the right to contact the Estonian Data Protection Inspectorate (aki.ee).

8. Cookies and analytics

We use cookies and browser storage necessary for the website and sign-in to work. Analytics cookies are used only with consent; advertising and personalisation cookies are disabled by default.

The cookie choice can be changed by clearing browser data and reopening the cookie choice dialog. If necessary cookies are refused, the account or payment flow may not work.

9. Security and changes

To protect data we apply access restrictions, encrypted connections, logging, backups and other appropriate technical and organisational measures.

We update these terms when the service, service providers or legal requirements change. The version in force and the date of update are published on this page.