Privacy Policy

1. DATA CONTROLLER

1.1. This website is operated by KB Auto Eesti OÜ (registry code 11462491, VAT EE101205389), Kooli 10, Rummu alevik, 76102 Lääne-Harju vald, Estonia.

1.2. For any data-protection enquiries, please contact: [email protected]

2. WHAT PERSONAL DATA DO WE COLLECT?

2.1. Through the contact form we collect information needed to respond to your enquiry:

• First and last name

• Company name and job title (optional)

• Phone number

• Email address

• Message content and rental request details (equipment sought, rental period, nature of work, additional comments)

2.2. Automatically collected when you visit the website:

• Your device's IP address (anonymised)

• Browser type and version

• Device type (desktop, mobile or tablet) and operating system

• Date and time of visit

• Pages visited and navigation sequence

• Referring website (referrer)

• Mouse click, scroll and cursor behaviour (collected via Microsoft Clarity)

• Ad performance and conversion data (collected via the Meta Pixel)

• Session duration and visit frequency

3. PURPOSE AND LEGAL BASIS OF PROCESSING

3.1. Processing rental enquiries and contact requests – we use the data to reply to your enquiry, prepare a quotation and arrange the rental contract. Legal basis: pre-contractual measures (GDPR Art. 6(1)(b)).

3.2. Website usage statistics and analytics – we use Google Analytics 4 and Microsoft Clarity to measure traffic, understand user behaviour and improve website content and usability. Legal basis: your consent (GDPR Art. 6(1)(a)), given via the cookie banner.

3.3. Marketing and ad measurement – we use the Meta Pixel (Facebook, Instagram) to measure the performance of advertising campaigns, track conversions and show you more relevant ads. Legal basis: your consent (GDPR Art. 6(1)(a)), given via the cookie banner.

3.4. Ensuring website security – we process technical logs to detect security incidents. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

4. SHARING WITH THIRD PARTIES

4.1. We do not sell or distribute your personal data to third parties for marketing purposes.

4.2. We use the following third-party services:

• Google LLC (Google Tag Manager, Google Analytics 4) – website analytics. Data may be processed in the USA; transfers are protected by EU Standard Contractual Clauses. More: policies.google.com/privacy

• Microsoft Corporation (Microsoft Clarity) – user behaviour analysis (session recordings, heatmaps). More: privacy.microsoft.com

• Meta Platforms Ireland Limited (Meta Pixel) – ad performance measurement and remarketing on the Facebook and Instagram platforms. Data may be processed outside the EU under EU Standard Contractual Clauses. More: facebook.com/privacy/policy

• Resend Inc. – email delivery service. Data submitted via the contact form is transmitted to us through Resend's infrastructure. More: resend.com/privacy

4.3. Where required by law, we may disclose data to supervisory authorities (e.g. the Estonian Data Protection Inspectorate) or courts.

5. RETENTION PERIODS

5.1. Data collected through the contact form is retained for up to 3 years from the date of submission, unless a longer retention obligation arises from a concluded rental contract.

5.2. Analytics and marketing data are processed by third parties under their own policies: Google Analytics 4 – up to 14 months; Microsoft Clarity – up to 13 months; Meta Pixel – up to 3 months (via cookies).

6. YOUR RIGHTS

6.1. Under the GDPR you have the following rights:

• Right of access – to obtain information about the personal data we hold about you.

• Right to rectification – to have inaccurate or incomplete data corrected.

• Right to erasure ("right to be forgotten") – to have data deleted where there is no longer a lawful basis for processing.

• Right to restriction – to restrict processing under certain conditions.

• Right to object – to object to processing based on legitimate interests.

• Right to data portability – to receive your data in a structured, commonly used, machine-readable format.

• Right to withdraw consent – to withdraw at any time the consent given via the cookie banner, without affecting the lawfulness of processing carried out before withdrawal.

6.2. To exercise any of these rights, send a request to [email protected]. We will respond within 30 days.

6.3. You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee, [email protected], tel +372 5620 2341).

7. COOKIES

For information on how we use cookies, please see our Cookie Policy (/kupsised/).

8. CHANGES TO THIS POLICY

8.1. We reserve the right to update this Privacy Policy. For material changes we will provide at least 14 days' notice on the website.

8.2. Last updated: 3 July 2026.