Legal

Privacy policy

Effective from 7 October 2026.

In this privacy policy we describe which personal data HARJU KOPP OÜ collects through the website hkest.ee, why we use it, who we share it with and what rights you have. We process personal data in line with the General Data Protection Regulation (EU 2016/679, GDPR) and the Estonian Personal Data Protection Act.

1. Controller

HARJU KOPP OÜ
Registry code: 17188031
Email: info@hkest.ee
Phone: +372 518 7099, +372 602 8545

For any question or request about personal data, you can use the contacts above.

2. What data we collect

  • Enquiry data. On the quote form we ask for your name, phone number and, if you wish, an email address, the site location and a description of the work. You can also add a photo or a file. The name of the selected service is stored with the enquiry.
  • Communication data. If you call or write to us, we process your contact details and the content of the communication.
  • Contract data. If you order the work, we process data related to the order, invoicing and carrying out the work.
  • Website usage data. With your consent we collect data about use of the website through cookies and similar technologies: pages visited, device and browser, approximate location based on the IP address, an advertising click identifier and the form submission event.

Please do not add health data or other special-category personal data to an enquiry or a file. Where possible, keep bystanders and vehicle number plates out of photos.

3. Why we use the data and on what legal basis

  • Answering the enquiry and preparing a quote. Basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)).
  • Performance of a contract, planning the work and invoicing. Basis: performance of a contract (Art. 6(1)(b)).
  • Meeting accounting and other legal obligations. Basis: legal obligation (Art. 6(1)(c)).
  • Website statistics and improvement (Google Analytics). Basis: your consent (Art. 6(1)(a)).
  • Measuring ad performance and displaying ads (Google Ads), including measuring whether an ad click was followed by an enquiry. Basis: your consent (Art. 6(1)(a)).
  • Bringing and defending claims, and keeping the website secure. Basis: our legitimate interest (Art. 6(1)(f)).
  • Blocking spam on the quote form (Cloudflare Turnstile). The check sends a technical request to Cloudflare. Basis: our legitimate interest (Art. 6(1)(f)).

We do not make automated decisions or do profiling that would have legal effects for you.

4. Cookies and Google services

Essential cookies keep the website working and remember your cookie choices. They do not need consent.

We only set analytics and advertising cookies with your consent. We use Google Tag Manager, Google Analytics and Google Ads, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). If you do not consent, those cookies are not used. Measurement then runs in a limited way without cookies through Google consent mode.

  • Google Analytics (e.g. _ga, _ga_*) – visit statistics, kept for up to 2 years.
  • Google Ads (e.g. _gcl_au, _gcl_aw) – measuring ad clicks and enquiries (conversions), kept for up to 90 days.
  • Google advertising cookies (e.g. IDE, test_cookie) – displaying ads and remarketing, kept for up to 13 months.

You can change or withdraw consent at any time in the cookie settings. You can also delete cookies in your browser settings. More about how Google uses data: policies.google.com/technologies/partner-sites. You can turn off personalised ads at adssettings.google.com.

5. Who we share data with

We do not sell personal data. Our processors may handle data only on our instructions and only as far as needed to provide the service:

  • website hosting and email providers;
  • Google Ireland Limited (analytics and advertising, with your consent);
  • Cloudflare, Inc. (Turnstile bot check on the form);
  • the accounting service provider;
  • subcontractors, where needed to carry out the ordered work, for example a waste handler or a transport partner. We give them only the data needed to do the work, such as the site location and a contact person.

Where the law requires it, we may also pass data to public authorities.

6. Transfers outside the European Economic Area

When Google services are used, data may be transferred to Google LLC in the United States. Google LLC participates in the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. Google also uses the European Commission’s standard contractual clauses.

7. How long we keep the data

  • Enquiries that did not become a contract: up to 12 months after the last contact.
  • Data related to a contract and an order: for the life of the contract and for up to 3 years after it ends, so possible claims can be handled.
  • Accounting documents: 7 years from the end of the financial year, as required by the Accounting Act.
  • Cookie data: for the periods in section 4, or until consent is withdrawn.

When the retention period ends, the data is deleted or anonymised.

8. Your rights

You have the right to:

  • access data about you and receive a copy of it;
  • request correction of inaccurate data;
  • request erasure of data when we no longer have grounds to keep it;
  • request restriction of processing;
  • object to processing based on legitimate interest;
  • receive the data you provided in a machine-readable form (data portability);
  • withdraw consent at any time. Withdrawal does not affect the lawfulness of processing already carried out.

You can send a request to info@hkest.ee. We reply within one month at the latest. If you believe your rights have been infringed, you can contact the Estonian Data Protection Inspectorate (www.aki.ee, info@aki.ee) or the courts.

9. Data security

We protect personal data with appropriate technical and organisational measures. The website connection is encrypted (HTTPS), and only staff who need it to answer an enquiry can access enquiries.

10. Changes

We may update this privacy policy, for example because of new services or legal requirements. The current version and its effective date are always on this page.

Call Request a quote