How we process your personal data

This document complies with GDPR (EU 2016/679) and the Estonian Personal Data Protection Act. Last updated: 2026-05-29. For questions and requests, write to master@montagetallinn.ee.

Data controller — who processes your data

The controller of your personal data is Tokarenko Kostiantyn (sole proprietor / FIE), operating under the Montage Tallinn brand from Tallinn, Estonia.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

Data protection contact (DPO): master@montagetallinn.ee.

What we collect

When you submit the request form or contact us via WhatsApp, Telegram, email or phone, we collect:

  • Name and contact details (phone, email, messenger username)
  • Description of the task
  • Photos of the site (optional, at your discretion)
  • Location data (district, address of the site)

We do not collect special categories of data (health, political views, biometrics, etc.) and we do not use automated decision-making or profiling.

Why we process the data

The legal bases for processing are performance of a contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)) and your consent (Art. 6(1)(a)) where required.

  • Processing and replying to your request
  • Service quality and communication during the job
  • Marketing messages — only with your explicit consent
  • Compliance with legal and tax obligations

How long we keep the data

  • Active requests: 3 months after completion — for warranty handling and feedback
  • Archived data: 1 year — for record-keeping and proof of performance
  • Accounting documents: 7 years, as required by Estonian law
  • After deletion: data is erased permanently and cannot be restored

Your rights — what you can request

Under GDPR you have the right to:

  • Request access to your data
  • Correct inaccurate or incomplete data
  • Delete data (“right to be forgotten”)
  • Restrict processing
  • Receive a copy of your data in a portable format
  • Object to processing based on legitimate interest
  • Withdraw consent previously given, at any time

Send requests to master@montagetallinn.ee — we reply within 30 days. If our response does not satisfy you, you have the right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Cookies on the site

Cookies are small text files that a site stores in your browser. This site uses them for two purposes only:

  • Technical cookies (always on) — strictly necessary for the site to function: the language switcher, retaining site state and storing your cookie choice. Set without consent under Art. 5(3) of the ePrivacy directive. Lifetime: session (until the browser is closed) or up to 12 months for the consent cookie.
  • Analytics cookies (only with your consent) — Google Analytics 4 (cookies _ga, _ga_*) to understand which pages are popular and where users get stuck. Lifetime: up to 24 months. Data is anonymised (IP truncated); profiling is not used. Without consent, analytics does not run and no cookies are set.

The site does not set advertising, remarketing or tracking cookies from third-party ad networks. Beyond GA4 the site contains no embedded widgets, ad networks or social pixels that set third-party cookies.

Cookie consent — how the banner works and how to change settings

On your first visit you see a cookie banner with three actions: accept, reject, open settings. Your choice is stored in a technical cookie and applied on subsequent visits.

Consent is voluntary and can be withdrawn at any time by clearing cookies in your browser. Refusing analytics cookies has no effect on the operation of the site. You can also block cookies entirely in your browser:

  • Chrome: Settings → Privacy and security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Cookies and site permissions

With cookies fully blocked, some site features may work in a limited way. When analytics is active, cookie data is transferred to Google LLC (USA) under the EU Standard Contractual Clauses — see “Who else may see the data” below. Google Privacy Policy: policies.google.com/privacy.

If the cookie rules change materially, we’ll update the date at the top of this document and, where needed, show the banner again to ask for renewed consent.

Who else may see the data

Your data may be shared with the following processors:

  • Google LLC (USA) — Google Analytics 4, only with your consent to analytics cookies. Transfer is protected by the EU Standard Contractual Clauses.
  • Plaadiriik OÜ — only if you opted for an invoice with käibemaks (VAT), and only to the extent needed to issue the invoice.
  • LHV Pank — payment processor when paid via the ettevõtluskonto.

We do not sell your data to third parties and do not pass it on to marketing or advertising networks.

How we protect the data

We use encryption of data in transit (HTTPS / TLS), secure storage and restricted access to personal data limited to the purposes of the contract.

In the event of a personal data breach that creates a risk to your rights, we will notify you and the Estonian Data Protection Inspectorate within 72 hours, as required by GDPR.

Updates to the policy

If material changes are made to the policy, we’ll notify you via the site and update the date at the top of the document. Archived versions are available on request.