Autoilu.ee (hereinafter referred to as “we”, “Autoilu”) considers the privacy of its customers and website visitors to be important. This privacy policy explains what personal data we collect, why and on what legal basis we use it, to whom we transfer the data, how long we store it and what your rights are.

Controller:
OÜ Lõuna Autoilu (registration code 12295584)
Address: Tartu County, Tartu City, Tartu City, Lääneringtee 39, 50501
E-mail: lounaautoilu@gmail.com
Phone: +372 53717831

1. Definitions

• Personal data – information about an identified or identifiable natural person (e.g. name, contacts, vehicle data).
  
  
• Processing – operations performed on personal data (e.g. collection, storage, use, transfer, deletion).
  
  
• Controller – the person/company that determines the purposes and means of processing personal data (Autoilu).
  
  
• Processor – a service provider authorized by us who processes data on our behalf (e.g. IT and cloud services, analytics).
  
  

2. What data do we collect

The data we collect depends on your interaction with us and the service you use.

2.1. 2.1. Price request and contact forms

• Name, email address, phone number
  
  
• Vehicle details (registration number, make/model)
  
  
• Desired service and its description (including additional requests, photos, if you submit them)

2.2. 2.2. Website usage

• Technical data collected using cookies and similar technologies (browser type, device information, IP address, time of visit, pages visited)
  
  
• Data generated when using additional third-party services (e.g. maps, analytics)
  
  

Providing data for the contact form or rental agreement is necessary so that we can contact you and provide the service. The collection of technical and analytics data helps to improve the website and ensure the user experience.

3. Purposes and legal bases for processing

We process your personal data only for clear purposes and in accordance with the GDPR.

• Communicating with you and providing quotes – responding to inquiries, preparing personalized offers (GDPR art 6(1)(b) pre-contractual activities or art 6(1)(f) legitimate interest).
  
  
• Provision of the service (including rental agreements) – concluding and fulfilling contracts, managing reservations, invoicing (art 6(1)(b)).
  
  
• Compliance with legal obligations – accounting, compliance (art 6(1)(c)).
  
  
• Website performance and statistics – security, error management, usage statistics (art 6(1)(f) legitimate interest).
  
  
• Marketing – if you have given your explicit consent (art 6(1)(a)), we will send you newsletters or special offers; you can withdraw your consent at any time.
  
  

4. To whom we transfer your data

We do not sell or rent your personal data to third parties. If necessary, we use processors who operate under contracts and comply with the same privacy requirements as us (e.g. web hosting, email and SMS service, cloud servers, analytics, IT maintenance, payment solutions).
Data may also be transferred pursuant to legislation (e.g. to public authorities based on a legal obligation).

5. Data retention

We only retain personal data for as long as it is necessary to achieve the purpose or is required by law.

• Inquiries and correspondence: up to 2 years or until the dispute/claim deadlines have expired.
  
  
• Billing documents: in accordance with the Accounting Act (7 years).
  
  
• Marketing consents: until the consent is withdrawn.
  When the basis for retention expires, we delete or anonymize the data in a secure manner.
  
  

6. Security

We implement appropriate technical and organizational measures (including access restrictions, log management, encryption and backup) to protect personal data against unauthorized access, modification or destruction. We strive to assess the risks in proportion to the nature of the data being processed.

7. Your rights

You have the following rights under the GDPR:

• Access to your data and a copy of it;
  
  
• Rectification – correction of inaccurate data;
  
  
• Deletion – “right to be forgotten” if there is no legal basis;
  
  
• Restriction – temporary suspension of processing in certain cases;
  
  
• Data portability – in a machine-readable format;
  
  
• Objection – based on legitimate interest in processing;
  
  
• Withdrawal of consent – ​​if the processing was based on consent (does not affect previous processing).
  
  

To hand in the application please contact us via lounaautoilu@gmail.com . We will answer shortly, but not later than in 30 days. If you find that your rights have been violated, you have the right to contact the Data Protection Inspectorate or a court.

8. International transfers

When we use services whose servers are located outside the European Economic Area, we ensure data protection by means of appropriate safeguards (e.g. the European Commission’s standard contractual clauses). Information about specific transfers can be requested from our contact.

9. Cookies

Our website uses cookies to ensure the reliability of the page, improve the user experience and collect anonymous statistics. Cookies are small text files that are stored on your device. Cookies can be managed in your browser settings; disabling all cookies may affect the performance of the site.

Types of cookies we use:

• Essential cookies – required for basic site functionality (session management, security).
  
  
• Preference cookies – e.g. remembering language preference.
  
  
• Statistics/analytics – helps us understand how the site is used (e.g. Google Analytics); data is used in aggregate form.
  
  
• Third-party content – ​​map services (e.g. Google Maps), videos, etc., which may set their own cookies.
  
  

Cookie management:
You can restrict or delete cookies in your browser settings. Help links:

• Chrome: https://support.google.com/chrome/answer/95647
  
  
• Firefox: https://support.mozilla.org/et/kb/kupsised
  
  
• Safari: https://support.apple.com/et-ee/guide/safari/sfri11471/mac
  
  
• Edge: https://support.microsoft.com/help/4027947
  Instructions for mobile devices can be found on the manufacturer’s support page.
  
  

Where consent is required (e.g. analytics and marketing cookies), we will ask for it before saving the relevant cookies. Consent can be changed at any time in the browser settings and/or through our cookie preferences tool (if activated).

10. Changes to the Privacy Policy

We may update the Privacy Policy to reflect changes in legislation, services or technologies used. The new version will be published on the autoilu.ee website with the effective date. We will notify you of any significant changes in an appropriate manner (e.g. by notice on the website or by email, if appropriate).