Privacy policy

Who processes the data

The data controller is the operator of the Elamaa Kinnisvaraportaal portal. For data protection questions write to [email protected].

Which data we collect

• Account data: name, email address, phone, account type, language and a password hash.
• Listings: property description, price, address, map location, photos and the contact details you add to a listing.
• Inquiries: the name, email, phone and message you send to the author of a listing.
• Favourites and saved searches.
• Payments: ordered plans and services, amounts and payment status. We never see or store card details — Stripe processes them.
• Technical data: IP address, browser and device type, time of the request.
• Statistics: the number of listing views and phone reveals and visited pages — anonymously; with your consent, also an approximate location derived from the IP address (country, city).

Purposes and legal bases

• Performance of a contract: creating an account, publishing listings, delivering inquiries, providing paid services.
• Legitimate interest: security of the portal, prevention of fraud and abuse, counting listing views and aggregate statistics.
• Consent: the weekly newsletter, statistics cookies and advertising cookies. You can withdraw consent at any time.
• Legal obligation: keeping accounting records.

Cookies and browser storage

Necessary cookies keep you signed in, protect forms, remember the language and your cookie choice. Browser storage holds the list of recently viewed listings. The portal does not work without them, so they cannot be switched off.

Visits are always counted anonymously, without cookies and without a country. An approximate location from the IP address (country, city) and analytics cookies are used only with your consent.

Advertising cookies are also used only with your consent. Ads on the portal are served by Google AdSense in any case: with your consent Google and its partners use cookies to show more relevant ads and measure their performance. Without consent, non-personalised ads are shown without advertising cookies.

The cookies in use are listed on the “Cookies” page (linked in the footer of every page), where you can also change your choice at any time.

Who receives the data

• The content of a listing and the contact details shown in it are public.
• Inquiry data goes to the author of the listing.
• Stripe processes payments.
• OpenFreeMap serves the map data (OpenStreetMap): when a map loads, OpenFreeMap receives your IP address.
• Google (AdSense) serves ads and receives your IP address when an ad loads and, with your consent, advertising cookie data.
• Hosting and email delivery providers process data on our behalf and under our instructions.

We do not sell personal data. Data is transferred outside the European Economic Area only when the provider ensures the protection required by law.

How long we keep the data

• Account data — until the account is deleted.
• Listings and photos — until you delete them, or up to 30 days after the account is deleted.
• Accounting records — 7 years.
• Server logs — up to 12 months.

Newsletter

If you subscribed to the newsletter, we send one email a week with new listings. You can unsubscribe through the link in every email or in your profile.

Your rights

You may access your data, ask to have it corrected, erased or restricted, receive it in a machine-readable form, object to processing and withdraw consent.

To do so, write to [email protected]. We reply within one month. If you believe your rights have been violated, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

Changes

We may update this policy. The current version is always on this page; registered users are told about significant changes by email.