1. Who processes the data
The controller of personal data is Normrise OÜ, which operates Seadusta.ee.
Contact: info@seadusta.ee
Website: https://seadusta.ee
Normrise OÜ, registry code 17620764, VAT no. EE103040909
Käpa AÜ 4, Pangodi küla, Kambja vald, 62017 Tartu maakond
Questions about invoices: arved@seadusta.ee
2. What data we collect
Through the enquiry form
- Name and e-mail address – required; without them we cannot reply.
- Phone number – optional.
- Building details: building type, construction date, location (rural municipality or city) and the description of the situation that you write yourself.
- Technical data: the time the enquiry was sent, the IP address and the page it was sent from. These are used only to block spam.
When buying a document kit
- Name and e-mail address – to issue the invoice and send the download link. Without them we cannot fulfil the order.
- Invoice details: the kit ordered, amount, invoice number and date, time the payment was received.
- Download time and number of downloads – so that the link is not passed on.
We do not see or store your bank details or card number. When you pay via bank link, the payment takes place in the Montonio environment; when you pay by bank transfer against an invoice, we see only the incoming payment on our bank statement.
When you visit the website
The website itself does not create user accounts or track you by default. Analytics and advertising cookies are loaded only if you have given consent – see section 6.
3. Why and on what basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and making an offer | Taking steps at your request prior to entering into a contract (GDPR Art 6(1)(b)) |
| Providing the agreed service | Performance of a contract (GDPR Art 6(1)(b)) |
| Spam prevention and website security | Legitimate interest (GDPR Art 6(1)(f)) |
| Sale of document kits: invoice, delivery and download link | Performance of a contract (GDPR Art 6(1)(b)) |
| Retention of invoices | Legal obligation – Accounting Act (GDPR Art 6(1)(c)) |
| Measuring analytics and advertising performance | Your consent (GDPR Art 6(1)(a)) |
| Accounting and statutory obligations | Legal obligation (GDPR Art 6(1)(c)) |
We do not use your data to send newsletters or marketing offers unless you have specifically asked for it.
4. How long we keep data
| Data | Retention period |
|---|---|
| Enquiry that did not lead to a contract | Up to 12 months, then deleted |
| Correspondence and documents relating to the client relationship | Up to 7 years after the work ends (for accounting and possible claims) |
| Purchase data: name, e-mail, invoice | 7 years – the Accounting Act requires source documents to be kept |
| Technical logs and spam prevention data | Up to 12 months |
If you ask us to delete your data sooner, we will do so – except for what the law requires us to keep (for example, accounting source documents).
5. Who we share data with
| Recipient | When and why |
|---|---|
| Zone Media OÜ | Web hosting and e-mail. The data is stored on their servers in Estonia. |
| Local authority, Rescue Board, Building Register | Only if you have ordered a service and authorised us to act on your behalf in the proceedings. |
| Third-party specialists (surveyor, auditor) | Only with your consent and only to the extent needed to do the work. |
| Google Ireland Ltd | Analytics and advertising measurement – only with cookie consent. Does not include the form content. |
| Montonio Finance UAB (Lithuania) | If you pay via bank link. The payment takes place in the Montonio environment under their own terms – we do not see or store your bank details. Montonio is not used when you pay by bank transfer. |
We do not sell personal data or pass it on to marketing companies.
6. Cookies
The website uses two types of cookies.
- Necessary. They only store your choice in the cookie banner. They cannot be switched off and they do not track you.
- Analytics and advertising. Google Analytics and Google Ads. They help us see how many people reach the site and whether advertising works. Loaded only after your consent.
If you click "Only necessary" in the cookie banner, Google scripts are not loaded at all and nothing about you is sent to them. You can change your choice at any time:
7. Your rights
Under the General Data Protection Regulation you have the right to:
- access the data collected about you and receive a copy;
- have inaccurate data corrected;
- request erasure if the data is no longer needed and there is no legal obligation to keep it;
- restrict processing or object to it;
- withdraw consent – this does not affect processing carried out before withdrawal;
- receive your data in a portable format.
To make a request, write to info@seadusta.ee. We will reply within one month. If you are not satisfied with our reply, you have the right to contact the Data Protection Inspectorate (Tatari 39, Tallinn, info@aki.ee).
8. Security
The website uses an encrypted connection (HTTPS). Enquiries are forwarded by e-mail and stored on the server in a folder that cannot be read from the web. Only the operator of Seadusta.ee has access.
No one can promise complete security on the internet. If you want to send particularly sensitive documents, we will agree on a more secure method separately.
9. Changes
If this notice changes, we will update the date below. We will announce significant changes separately on the page.
Last updated: 27.09.2026. Questions: info@seadusta.ee.