Privacy Policy

1. Data controller

The controller of personal data is AUTOSKY RENT OÜ (registry code 12932513, VAT no. EE102447095), Läike tee 6, Peetri alevik, Rae vald, 75312 Harju County, Estonia.

For any question about the processing of personal data you can reach us at info@autosky.ee or +372 515 1676.

2. What data we collect

We collect only the data you provide to us yourself, together with limited technical data about your use of the website.

• Contact form: name, email address, phone number and the content of your message.
• Vehicle enquiry form: name, email address, phone number, estimated annual mileage, additional information, and the vehicle and package the enquiry relates to.
• Car request form: name, email address, phone number, desired make and model, budget, maximum mileage, colour preferences, equipment preferences, delivery timeframe, buyer type (private individual or company) and company name where the buyer is a company.
• Web chat: name (optional), phone number (optional) and the content of the conversation.
• Technical data: IP address, browser and device type, pages visited and information obtained from cookies.

We do not collect special categories of personal data, and we do not carry out automated decision-making that produces legal or similarly significant effects concerning you.

3. Purposes and legal bases

• Responding to enquiries and preparing offers — taking steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
• Performing rental and sales contracts and related communication — performance of a contract (Art. 6(1)(b)).
• Accounting and compliance with statutory obligations — compliance with a legal obligation (Art. 6(1)(c)).
• Operating the website, usage statistics and service improvement — our legitimate interest (Art. 6(1)(f)).
• Marketing and measuring advertising performance through cookies — your consent (Art. 6(1)(a)), which you may withdraw at any time.

4. Cookies and analytics

The website uses cookies. Some are necessary for the site to function; the rest help us understand how the site is used and measure advertising performance.

We use Google Tag Manager, through which Google Analytics and the Meta (Facebook) pixel are loaded. When you submit a form, the Meta cookie identifiers _fbp and _fbc are sent along with your enquiry so that advertising performance can be measured correctly. These identifiers contain neither your name nor your contact details.

For cookies that are not necessary for the site to function we ask your consent through a banner shown when you visit. Until you have given consent, statistics and advertising cookies are disabled and no measurement data is sent to Google or Meta. Your choice is remembered for 12 months and you can change it at any time through the "Cookie settings" link in the footer — withdrawing consent is as easy as giving it.

We keep a record of each decision as evidence: the time of the choice, the choice itself, the version of this privacy policy, and a random per-device identifier. That identifier is not linked to your name, email or enquiry and cannot identify you. We do not store an IP address in the consent record.

You can also refuse cookies in your browser settings. Blocking necessary cookies may prevent parts of the site from working.

5. Who we share data with

We do not sell personal data. We share it only to the extent necessary to provide our service, with the following recipients:

• Zone Media OÜ — web hosting and email services (Estonia).
• Google Ireland Limited — Google Tag Manager and Google Analytics.
• Meta Platforms Ireland Limited — the Meta pixel, advertising measurement, and WhatsApp Business, through which the web chat operates.
• Where necessary, insurers, financing partners and service partners, when required to perform a contract.
• Public authorities, where we are under a statutory obligation to do so.

6. Transfers outside the European Economic Area

Google and Meta may process data outside the European Economic Area, including in the United States. Such transfers rely on safeguards approved by the European Commission, such as standard contractual clauses or an adequacy decision under the EU–US Data Privacy Framework.

7. How long we keep data

• Enquiries and offers that did not lead to a contract — up to 3 years from the last contact.
• Contracts and accounting source documents — 7 years, as required by the Estonian Accounting Act.
• Web chat content — up to 12 months.
• Cookie-related data — for the lifetime of the cookie concerned.

Once there is no longer a basis for retention, we delete the data or render it anonymous.

8. Your rights

Under the GDPR you have the right to:

• access the data we process about you;
• have inaccurate data corrected;
• have data erased where there is no longer a basis for processing;
• request restriction of processing;
• receive your data in a machine-readable format and transmit it to another controller;
• object to processing based on our legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To make a request, write to info@autosky.ee. We will respond within one month at the latest.

9. Security

The website uses an encrypted connection (HTTPS). Access to personal data is limited to those employees who need it to perform their duties.

10. Complaints

If you believe your personal data is not being processed lawfully, please contact us first. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee).

11. Changes

We may update this privacy policy from time to time. The current version is always available on this page together with the date it was last updated.