How we process your personal data

This document complies with GDPR (EU 2016/679) and the Estonian Personal Data Protection Act. Last updated: 2026-05-29. For questions and requests, write to master@montagetallinn.ee.

Data controller — who processes your data

The controller of your personal data is Tokarenko Kostiantyn (sole proprietor / FIE), operating under the Montage Tallinn brand from Tallinn, Estonia.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

Data protection contact (DPO): master@montagetallinn.ee.

What we collect

When you submit the request form or contact us via WhatsApp, Telegram, email or phone, we collect:

  • Name and contact details (phone, email, messenger username)
  • Description of the task
  • Photos of the site (optional, at your discretion)
  • Location data (district, address of the site)

We do not collect special categories of data (health, political views, biometrics, etc.) and we do not use automated decision-making or profiling.

Why we process the data

The legal bases for processing are performance of a contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)) and your consent (Art. 6(1)(a)) where required.

  • Processing and replying to your request
  • Service quality and communication during the job
  • Marketing messages — only with your explicit consent
  • Compliance with legal and tax obligations

How long we keep the data

  • Active requests: 3 months after completion — for warranty handling and feedback
  • Archived data: 1 year — for record-keeping and proof of performance
  • Accounting documents: 7 years, as required by Estonian law
  • After deletion: data is erased permanently and cannot be restored

Your rights — what you can request

Under GDPR you have the right to:

  • Request access to your data
  • Correct inaccurate or incomplete data
  • Delete data (“right to be forgotten”)
  • Restrict processing
  • Receive a copy of your data in a portable format
  • Object to processing based on legitimate interest
  • Withdraw consent previously given, at any time

Send requests to master@montagetallinn.ee — we reply within 30 days. If our response does not satisfy you, you have the right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Cookies on the site

Cookies are small text files stored in your browser. Necessary cookies support the operation of the site. Optional analytics cookies are used only with your consent.

Google Analytics 4 uses _ga and _ga_* cookies to measure visits; their lifetime can be up to 24 months. You can accept or reject optional cookies and change your choice in cookie settings.

The site uses advanced Google Consent Mode. Before you consent, and when you reject optional cookies, Google tags may send measurement signals without analytics or advertising cookies. These signals should not be described as fully anonymous. Consent settings control the storage and use of data for analytics and advertising.

Cookie consent — how the banner works and how to change settings

The banner lets you accept all, reject all or open settings to choose optional categories. Your choice is stored in your browser’s local storage (localStorage, key mt_consent_v1) and applied on subsequent visits.

Consent is voluntary. You can review or change your choice, including withdrawing consent, using Cookie settings at the bottom of the page. Rejecting optional cookies does not prevent you from using the site or sending a request.

Clearing this site’s browser data removes the saved choice. You can also manage cookies through your browser’s privacy settings. Google Privacy Policy: policies.google.com/privacy.

Who else may see the data

Your data may be shared with the following processors:

  • Google LLC (USA) — Google Analytics 4. Analytics cookies are used only with your consent; when consent is denied, measurement signals without cookies may still be sent under Google Consent Mode. Transfer is protected by the EU Standard Contractual Clauses.
  • Plaadiriik OÜ — only if you opted for an invoice with käibemaks (VAT), and only to the extent needed to issue the invoice.
  • LHV Pank — payment processor when paid via the ettevõtluskonto.

We do not sell your data to third parties and do not pass it on to marketing or advertising networks.

How we protect the data

We use encryption of data in transit (HTTPS / TLS), secure storage and restricted access to personal data limited to the purposes of the contract.

In the event of a personal data breach that creates a risk to your rights, we will notify you and the Estonian Data Protection Inspectorate within 72 hours, as required by GDPR.

Updates to the policy

If material changes are made to the policy, we’ll notify you via the site and update the date at the top of the document. Archived versions are available on request.