Privacy Notice
Effective Date: November 21, 2025
This Privacy Notice explains how WELDME OÜ, operating under the trading name Estiq (“we”, “us”, “our”), processes personal data when you use the valuation.plus372.ee service (“Service”). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
1. Data Controller
The controller responsible for your personal data is:
WELDME OÜ (Estiq)
Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 50-4, 10115, Estonia
Email: legal@estiq.eu
2. Personal Data We Process
We process only the data necessary for providing and improving the Service. This includes:
- Identity & Contact Data: Name, email, phone number, and any information submitted via forms or emails.
- Property Data: Address or district, property specifications (size, rooms, floor, condition, energy class), coordinates, H3 index, and any details you voluntarily submit. Some property data may become personal data if it identifies a person.
- Technical Data: IP address, device and browser information, time zone, operating system, security logs.
- Usage Data: Page visits, valuation steps, timestamps, clickstream data, traffic logs.
- Cookies & Tracking Technologies: Explained in Section 9.
3. Purposes and Legal Bases
We process personal data only when there is a valid legal basis:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the Valuation Service (calculating estimates, generating reports) | Contract / Pre-contractual steps (Art. 6(1)(b)) |
| Customer Support & Broker Introductions | Legitimate Interest (Art. 6(1)(f)) or Consent (Art. 6(1)(a)) when you request a callback/intro |
| Security, Abuse Prevention & System Integrity | Legitimate Interest (Art. 6(1)(f)) |
| Analytics, UX Improvements & Non-Essential Cookies | Consent (Art. 6(1)(a)) |
| Legal Compliance (tax, accounting, legal obligations) | Legal Obligation (Art. 6(1)(c)) |
4. Automated Processing
Our system uses automated algorithms to generate property valuation estimates. This processing is informational only and does not create legal or significant effects within the meaning of GDPR Article 22.
You may request a human explanation or correction of your input data at any time.
5. Data Recipients
We do not sell personal data. We may share it with:
- Service Providers (Processors): Hosting partners, email services, IT vendors — all operate under GDPR-compliant Data Processing Agreements.
- Real Estate Partners: Only if you explicitly request an introduction or a broker callback.
- Authorities: If required to comply with legal obligations or court orders.
6. International Transfers
We primarily process data within the EEA. If data is transferred outside the EEA (e.g., cloud hosting providers), we use:
- European Commission Adequacy Decisions (Art. 45 GDPR); or
- Standard Contractual Clauses (SCCs) with supplementary safeguards (Art. 46 GDPR).
7. Data Retention
We retain data only as long as necessary:
- Valuation Data: Up to 24 months, unless deleted earlier upon request.
- Customer Inquiries / Leads: Up to 24 months.
- Technical & Security Logs: 30–90 days.
- Anonymised aggregate data: May be kept indefinitely, as it cannot identify individuals.
8. Your GDPR Rights
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete information.
- Erase your data (“right to be forgotten”).
- Restrict processing in certain situations.
- Object to processing based on legitimate interests.
- Data Portability: Receive data in a structured, machine-readable format.
- Withdraw Consent at any time (affects future processing only).
To exercise your rights, contact us at: legal@estiq.eu. We will respond within 30 days as required by GDPR.
9. Cookies
We use both essential and optional cookies. Essential cookies enable core functionality and cannot be disabled. Analytics and marketing cookies require your explicit consent via our Cookie Banner.
You may withdraw or adjust your cookie preferences at any time in your browser or via our consent manager.
10. Security Measures
We use industry-standard security measures, including:
- Encrypted connections (HTTPS/TLS)
- Firewall and intrusion monitoring
- Access control and authentication
- Regular backups and system updates
- Data minimisation and role-based access
11. Changes to this Privacy Notice
We may update this Notice from time to time to reflect legal or operational changes. The updated version will be published on this page with a new Effective Date.
12. Complaints
If you believe your privacy rights have been violated, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
Website: www.aki.ee
Email: info@aki.ee
Address: Tatari 39, 10134 Tallinn, Estonia