Privacy policy

Who is responsible

BaltEPS OÜ is the controller of your data. For anything about your data, write to info@balteps.ee.

Hunditubaka tee 5, Tallinn

What we receive

Only what you send in the price request or custom order form: name, company, email, phone, delivery address, message, the products you chose and attached files (drawings, photos).

Why

To prepare a quote, answer your questions and fulfil the order. Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). We do not use the data for advertising or share it for marketing.

Where it is kept

Your request is saved in the site's database and arrives as an email in the BaltEPS sales mailbox; attached files come only with the email. The site is hosted by Vercel Inc., the database runs at Neon (Databricks, Inc.) in a data centre in Frankfurt, and the mail runs at Zone Media OÜ; they process data only to run the site, keep the requests, count visits and deliver the emails.

To keep out spam, the request forms use Cloudflare Turnstile (Cloudflare, Inc.) to check that a person is filling them in. The check starts only when you begin filling in a form: Cloudflare receives your IP address and technical browser data and uses them to protect against bots. Legal basis: our legitimate interest in protecting the site from abuse (Article 6(1)(f) GDPR).

How long

As long as needed to handle the request and fulfil the contract, and as long as accounting law requires. If no order follows, we delete the request and the correspondence once they are no longer needed.

What stays in your browser

The price request basket is kept only in your browser until you send it. The site uses one cookie to remember your language. Visits are counted by us and by Vercel Web Analytics, both without cookies and without data that identifies a person: which pages are opened, where visitors came from, the country, the device type and the browser. So as not to count one person twice in a day, the address and the browser are turned into a code that changes every day; the IP address itself is not stored. Legal basis: our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR). There is no advertising and no other tracking.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to its processing: write to info@balteps.ee. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).