Privacy policy

Data controller

The controller of your personal data is Ecoterm AS, Ujula 4c, 75101 Kose, Harju County, Estonia. For data protection matters, write to eco@ecoterm.ee or call +372 6 756 332.

What data we collect

We collect only the data you submit yourself through a form:

• Contact form: name, email address, phone number and the content of your message.
• Design data questionnaire: in addition to the above, your company name, the site name and the technical design data you enter (loads, operating temperatures, heat source and other relevant details).

We do not track your movements on the website. Our web server records the IP address of every request in a technical log; this is necessary for server security and fault diagnosis. These logs are deleted automatically within five days.

Purpose and legal basis

We use the data you submit only to reply to your enquiry, prepare a thermal calculation and provide a quotation. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).

We do not use your data for direct marketing or pass it to anyone for marketing purposes.

How long we retain your data

• Enquiries and quotations: 3 years from the last contact. This matches the general limitation period for contractual claims (§ 143 of the General Part of the Civil Code Act), so we can prove what was agreed if needed.
• Contracts and related accounting records: 7 years, as required by § 12 of the Accounting Act.
• Enquiries that do not lead to a quotation: deleted within 12 months.

If you would like us to delete your data sooner, contact us. We will do so unless we are legally required to retain it.

Who receives the data

We do not sell your data or disclose it for independent use by third parties. Within Ecoterm, it is accessible only to the employees handling your enquiry.

The following service providers process data on our behalf:

• Web hosting provider (Telia) — hosts the website and stores its server logs.
• Email service (Microsoft 365) — your enquiries reach our mailbox through it.
• Backup on our own server — every enquiry is stored on the web server in addition to the email, so that no enquiry is lost even if a message gets held up somewhere.
• Kontekst Digital OÜ — maintains the website and monitors the operation of its forms.

These providers process data only on our instructions and do not use it for their own purposes. We will update this page if the list changes.

Cookies

The website does not set cookies without your consent. Fonts and other files are loaded from our own server, not from third-party networks.

We ask for consent for two things:

• The map on the contact page — loaded from Google Maps. Until you have consented and clicked "Show map", no request is made to Google. When the map is opened, Google's own terms apply.
• Usage statistics — to see which pages are useful. Without your consent we do not collect statistics.

If you give your consent, Google Analytics will place two cookies on your device:

• _ga — distinguishes visitors from one another. Valid for 2 years.
• _ga_5LGNJ4KVP4 — retains the state of the current visit. Valid for 2 years.

The statistics are processed on our behalf by Google Ireland Limited. Data may be transferred outside the European Union; Google participates in the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. We do not use Google's advertising features and we do not share data with advertising networks.

We store your choice on your own device (localStorage). This is needed so that we do not ask the same question on every visit — it does not require separate consent. You can change your mind at any time: click “Cookie settings” in the page footer.

Your rights

You have the right to:

• request access to the personal data we process about you and receive a copy;
• request correction of inaccurate data;
• request deletion of data no longer needed for the purpose for which it was collected;
• request restriction of processing or object to processing;
• receive your data in a portable, machine-readable format.

To exercise these rights, write to eco@ecoterm.ee. We will respond within one month.

Complaints

If you believe we have processed your data unlawfully, you have the right to contact the Estonian Data Protection Inspectorate (www.aki.ee).

Changes

If we change this document, we will publish the new version here at the same address.