Privacy policy (GDPR)

1. Controller

Eincar Grupp OÜ (STEK Estonia), registry code: 11289601, address: Võruvälja 9, Tartu, Estonia. Email: info@stek.ee

2. Data we process

• Contact details: name, email, phone.
• Vehicle details: make, model, year, specification and message content.
• Additional photos, if you upload them.
• Technical logs: IP address, browser information, cookie and event logs where needed.

3. Purposes and legal bases of processing

• Forwarding quote requests to installers: performance of a contract or steps needed before entering into a contract (GDPR art. 6(1)(b)).
• Customer communication and replying to inquiries: legitimate interest (art. 6(1)(f)).
• Website functionality and security: legitimate interest (art. 6(1)(f)).
• Marketing notifications, where applicable: consent (art. 6(1)(a)); you can withdraw it at any time.

4. Recipients and transfers

• We forward your request data to verified installers in the selected region so they can prepare a quote.
• Service providers (for example hosting and email) process data on our behalf under contract (GDPR art. 28).
• Data is not transferred outside the EU/EEA unless appropriate safeguards are in place (art. 46).

5. Retention periods

• We generally keep request data for up to 24 months or until the purpose has been fulfilled.
• Accounting and contract documents are retained for the periods required by law.

6. Your rights

• Right of access to your data and a copy of it (art. 15).
• Right to rectification (art. 16) and erasure (art. 17), subject to legal limitations.
• Right to restriction of processing (art. 18) and data portability (art. 20).
• Right to object (art. 21), including to direct marketing.
• Right to withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint with the Estonian Data Protection Inspectorate (AKI).

7. Cookies and tracking

We use only cookies needed for the Website to function and moderate analytics where applicable. You can manage cookie use in your browser settings or through the separate cookie notice when shown on the Website.

8. Security

We apply appropriate technical and organizational security measures to protect personal data from unauthorized access, disclosure, alteration or destruction.

9. Contact

For data protection questions, write to info@stek.ee. By post: Eincar Grupp OÜ, Võruvälja 9, 50112 Tartu, Estonia.

10. Changes

We may update this privacy policy. We will notify you of important changes on the Website. Continued use after changes take effect means acceptance of the new version.