1. Data controller

The controller of personal data is eServices Group OÜ (registry code 10858534), Toompuiestee 21, 10137 Tallinn, Estonia, e-mail info@eservices.ee, phone +372 661 6000.

2. What data we collect

We collect only the data that the visitor enters into a form.

Request form: company name and registry code, contact person’s name, e-mail and phone, planned start date, description of the company’s activity and any additional support selected.
Contact form: name, e-mail, topic and message.
Technical data: the time the form was submitted and the IP address, used only to detect and prevent abuse (spam, misuse of forms).

3. How we use the data

We use request form data to review the request, to contact the client, to prepare the agreement and to issue an invoice. Contact form data is used only to answer the enquiry.

An automatic confirmation e-mail is sent to the person who submitted the form. For security reasons that e-mail does not repeat the free text of the form (name, company name, topic, message) — it contains only fixed text and data generated by us, such as the reference number and the date. The content of the form itself is sent only to our own mailbox.

The data is not used for profiling or automated decision-making, and it is not sold or passed on to third parties for marketing purposes.

4. Legal basis

Request data — conclusion and performance of a contract (GDPR Art 6(1)(b)).
Contact form data — answering an enquiry at the client’s own request (GDPR Art 6(1)(b) and (f)).
IP address and logs — legitimate interest in protecting the forms against abuse (GDPR Art 6(1)(f)).
Accounting documents — legal obligation (GDPR Art 6(1)(c)).

5. Who we share data with

Data is not shared with third parties, except processors necessary for providing the service:

E-mail service provider — e-mail service in the European Union.
Server hosting provider — hosting of the website and data in the European Union.

In addition, an obligation to disclose data may arise from law (e.g. a lawful request from a supervisory or law-enforcement authority).

6. How long we keep the data

Website database — up to 7 days. Form submissions are kept in the website’s database only as a technical buffer and are then deleted automatically.
Enquiries and related communication — in eServices Group’s client management system for as long as needed to answer the enquiry and to conclude a possible agreement; they are then deleted.
Client data — for as long as the agreement is in force and, after it ends, 7 years under the Estonian Accounting Act.
Abuse-prevention logs (IP addresses) — 6 months.

Once the period has passed, the data is deleted.

7. Cookies

We use one technical cookie (lang_manual) to remember the visitor’s language choice for future visits. It stores only a two-letter language code, does not track the user on other websites and does not collect personal data. If analytics are added, this section will be updated and separate consent will be asked for it. See also our cookie notice.

8. Your rights

You have the right to access the data collected about you, to request its correction or deletion, to restrict processing, to object to processing and to receive your data in a machine-readable form. These rights can be exercised to the extent that they do not conflict with obligations arising from law (e.g. the accounting retention period).

A request can be submitted to info@eservices.ee. If you believe that we have processed your data unlawfully, you have the right to turn to the Estonian Data Protection Inspectorate.

Get started ↗

Privacy notice