Privacy Policy

Last updated: July 31, 2026

This Privacy Policy describes how keltvale (keltvale Osaühing) collects, uses, and protects your personal information. We are committed to safeguarding your privacy and handling your data with transparency and care.

Who We Are and Our Role as Data Controller

We operate a clutch and gearbox repair service workshop in Tallinn, Estonia. As the data controller, we determine how and why your personal information is processed. When you visit our website, contact us for repairs, or request a diagnostic service, you may provide information that we handle according to this policy and applicable data protection laws.

Information We Collect

We collect information in several ways:

• Contact Information: When you reach out via email or phone, we collect your name, email address, phone number, and any messages you send.
• Service Information: If you request repair or diagnostic services, we may collect details about your vehicle, repair needs, and preferences.
• Website Usage Data: We collect information about how you interact with our website, including pages visited, time spent, and device type.
• Cookies and Tracking: We use cookies to remember your preferences and improve your browsing experience.
• Payment Information: If applicable, we may collect payment details processed securely through third-party payment providers.

Legal Basis for Processing Your Data

We process your personal information based on the following legal grounds:

• Consent: When you voluntarily provide information through contact forms or service requests.
• Contractual Necessity: When processing is required to fulfill repair services or respond to your inquiries.
• Legitimate Interest: We may process data to improve our services, maintain website security, and comply with legal obligations.
• Legal Obligation: We may process data when required by applicable laws or regulations.

How We Use Your Information

Your information is used for the following purposes:

• Responding to your inquiries and providing repair or diagnostic services.
• Sending you service updates, confirmations, and relevant communications.
• Improving our website functionality and user experience.
• Analyzing website traffic and usage patterns to enhance our services.
• Maintaining security and preventing fraud or unauthorized access.
• Complying with legal, regulatory, and contractual obligations.

Data Retention

We retain your personal information for specific periods based on the type of data and purpose:

• Contact Form Messages: Retained for up to 24 months after your last interaction, allowing us to maintain service history and respond to follow-up inquiries.
• Service Records: Retained for up to 36 months to honor warranty claims and provide historical repair documentation.
• Website Analytics and Cookies: Retained for up to 12 months to analyze usage trends and improve our website performance.
• Server Logs: Retained for up to 12 months for security monitoring and technical troubleshooting.
• Payment Information: Retained only as long as necessary to process transactions and resolve billing disputes, typically up to 7 years for accounting purposes.

Your Rights

You have several rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your data, subject to legal requirements and contractual obligations.
• Right to Restrict Processing: You can ask us to limit how we use your information in certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to certain types of processing, particularly for marketing purposes.
• Right to Lodge a Complaint: You have the right to file a complaint with the Data Protection Authority of Estonia (Andmekaitse Inspektsioon).

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and collect non-personal usage data. Cookies are small files stored on your device that help us remember your preferences, improve website performance, and understand how you use our services. You can control cookie settings through your browser, though disabling some cookies may affect website functionality. We use both session cookies (temporary) and persistent cookies (long-term) depending on their purpose. Analytics cookies help us understand visitor behavior and improve our services. Functional cookies enable website features and remember your preferences.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption, secure servers, restricted access controls, and regular security assessments. However, no transmission method over the internet is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any passwords or access credentials.

Third-Party Services and Data Sharing

We may share your information with trusted third parties only when necessary to provide our services or comply with legal requirements. These include payment processors, hosting providers, and analytics services. We ensure all third parties maintain adequate data protection standards through contractual agreements. We do not sell, trade, or rent your personal information to external parties for marketing purposes. Any data sharing is limited to what is necessary and is always subject to confidentiality obligations.

International Data Transfers

Your personal information is primarily stored and processed within the European Union, complying with GDPR requirements. If we transfer data outside the EU, we implement appropriate safeguards such as Standard Contractual Clauses or other legally recognized mechanisms to ensure your information remains protected.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a child, we will promptly delete it. Parents or guardians who believe their child has provided information to us should contact us immediately.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services following any changes constitutes your acceptance of the updated policy. We recommend reviewing this policy periodically to stay informed about how we protect your information.