How we process your personal data
This document complies with GDPR (EU 2016/679) and the Estonian Personal Data Protection Act. Last updated: 2026-05-29. For questions and requests, write to master@montagetallinn.ee.
Who processes your data
The controller of your personal data is Tokarenko Kostiantyn (sole proprietor / FIE, registration TBD), operating under the Montage Tallinn brand from Tallinn, Estonia.
Processing is carried out in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).
Data protection contact (DPO): master@montagetallinn.ee.
What we collect
When you submit the request form or contact us via WhatsApp, Telegram, email or phone, we collect:
- Name and contact details (phone, email, messenger username)
- Description of the task
- Photos of the site (optional, at your discretion)
- Location data (district, address of the site)
We do not collect special categories of data (health, political views, biometrics, etc.) and we do not use automated decision-making or profiling.
Why we process the data
The legal bases for processing are performance of a contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)) and your consent (Art. 6(1)(a)) where required.
- Processing and replying to your request
- Service quality and communication during the job
- Marketing messages — only with your explicit consent
- Compliance with legal and tax obligations
How long we keep the data
- Active requests: 3 months after completion — for warranty handling and feedback
- Archived data: 1 year — for record-keeping and proof of performance
- Accounting documents: 7 years, as required by Estonian law
- After deletion: data is erased permanently and cannot be restored
What you can request
Under GDPR you have the right to:
- Request access to your data
- Correct inaccurate or incomplete data
- Delete data ("right to be forgotten")
- Restrict processing
- Receive a copy of your data in a portable format
- Object to processing based on legitimate interest
- Withdraw consent previously given, at any time
Send requests to master@montagetallinn.ee — we reply within 30 days. If our response does not satisfy you, you have the right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
Cookies on the site
The site uses:
- Technical cookies (always on) — necessary for the site to function, the language switcher and storing your consent
- Analytics cookies (only with your consent) — Google Analytics 4 to understand page popularity
Details are in the Cookie Policy. You can change your settings at any time via the "Cookies" link in the site footer.
Who else may see the data
Your data may be shared with the following processors:
- Google LLC (USA) — Google Analytics 4, only with your consent to analytics cookies. Transfer is protected by the EU Standard Contractual Clauses.
- Partner OÜ Partner OÜ (TBD) (reg. TBD, KMKR TBD) — only if you opted for an invoice with käibemaks (VAT), and only to the extent needed to issue the invoice.
- LHV Pank — payment processor when paid via the ettevõtluskonto.
We do not sell your data to third parties and do not pass it on to marketing or advertising networks.
How we protect the data
We use encryption of data in transit (HTTPS / TLS), secure storage and restricted access to personal data limited to the purposes of the contract.
In the event of a personal data breach that creates a risk to your rights, we will notify you and the Estonian Data Protection Inspectorate within 72 hours, as required by GDPR.
Updates to the policy
If material changes are made to the policy, we'll notify you via the site and update the date at the top of the document. Archived versions are available on request.
Write — I'll reply within 2 hours
Data subject requests, deletions and access requests go to email. For urgent questions WhatsApp is faster.