Legal

Privacy policy

Effective from: [KUUPÄEV] · Version 1.0

This policy explains how LMT Konsult OÜ (“we”) processes personal data when you use the website i-consult.ee and when we provide our service. Processing is carried out in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Estonian Personal Data Protection Act.

1. Data controller

CompanyLMT Konsult OÜ
Reg. no.14531770
AddressJärve 2, Tallinn 11314, Eesti
Emailinfo@i-consult.ee
Phone+372 52 47 369

We are not required to appoint a data protection officer. Please send any data-protection questions to the email address above.

2. What data we collect

2.1 Contact and enquiry data

Name, email address, phone number, company name and job title, and the content of your enquiry or booking.

2.2 Booking data

When you book a consultation, we collect the chosen time, time zone and the contact details you enter. The booking environment is run by a third-party provider acting as our processor.

2.3 Data received while providing the service

In providing the service we gain access to the client’s business and financial data. This is predominantly data of a legal entity, but it may also contain personal data (for example, of employees, board members, or representatives of customers or suppliers). With respect to this data we generally act as a processor and process it only on the client’s instructions, under the terms of a data-processing agreement.

2.4 Technical data

When visiting the website, we may collect the IP address, browser type, device type, pages visited and the time of the visit. See also the cookies section.

3. Purposes and legal bases of processing

PurposeDataLegal basis
Responding to enquiries and arranging a consultationContact and booking dataPre-contractual measures (GDPR Art. 6(1)(b))
Providing the service and performing the contractContact data, business and financial dataPerformance of a contract (Art. 6(1)(b))
Accounting and meeting tax obligationsBilling dataLegal obligation (Art. 6(1)(c))
Establishing and defending legal claimsContract and communication dataLegitimate interest (Art. 6(1)(f))
Website operation and securityTechnical dataLegitimate interest (Art. 6(1)(f))
Statistics and website improvementAnalytics dataConsent (Art. 6(1)(a))

4. Sharing of data

We do not sell or rent personal data. Data may be shared with the following categories of recipient:

  • Processors — productivity, email and cloud-storage provider (principally Microsoft 365), booking-environment provider, accounting-software provider. A data-processing agreement is in place with each.
  • Professional advisers — a bookkeeper, auditor or legal adviser, where necessary and proportionate.
  • Supervisory and law-enforcement authorities — where required by law.

Data is processed preferably within the European Economic Area. Where a provider processes data outside the EEA, this takes place only on the basis of a European Commission adequacy decision or standard contractual clauses.

5. Retention periods

Type of dataRetention period
Enquiries that did not result in a contract12 months from the last contact
Contract and communication data3 years from the end of the contract (general limitation period)
Accounting source documents7 years (Accounting Act)
Client financial data in the working environmentDeleted or returned no later than 90 days after the work ends, unless otherwise agreed

6. Your rights

You have the right to:

  • obtain information and a copy of the personal data concerning you;
  • request rectification of inaccurate data;
  • request erasure of data where there is no basis for processing;
  • request restriction of processing;
  • object to processing based on legitimate interest;
  • receive the data in a portable form;
  • withdraw any consent given at any time, without affecting the lawfulness of prior processing.

To make a request, write to info@i-consult.ee. We respond within one month. Where we act as a processor for data handled during the service, we forward the request to the relevant controller — that is, the client.

7. Lodging a complaint

If you believe your rights have been infringed, you have the right to contact the Estonian Data Protection Inspectorate (Tatari 39, 10134 Tallinn, www.aki.ee) or the courts. We would ask you to contact us first, though — most questions are resolved faster directly.

8. Cookies

The website uses cookies — small text files stored on your device.

TypePurposeBasis
NecessarySite operation, security, remembering the chosen currencyLegitimate interest — no consent requested
StatisticsMeasuring visits and improving contentConsent

We do not use marketing cookies. Cookies can be managed and deleted in your browser settings; blocking necessary cookies may disrupt the site.

9. Changes

We may update this policy from time to time. The current version is always on this page, along with its effective date. We notify existing clients by email of any material changes.