Legal · Privacy

Privacy Policy

Operator, controller, retention and processors are stated. Pending final legal review.

Legal review pending

The operator entity, data controller, contact address and retention period are set out below. The text itself is still pending final legal review before launch.

1. Scope and status

This Privacy Policy explains how Baltic House RE OÜ ("we", "us"), a private limited company registered in Estonia under registry code 11155779, processes personal data collected through this public website. Processing is governed by Estonian law and the EU General Data Protection Regulation. The text is pending final legal review.

This site is an informational website. It is not the IPPA operational platform and does not host confidential project, BIM or financial data.

2. What data we collect

We collect only the data you choose to share and a minimal set of technical data:

  • Contact form submissions — name, company, role, country, email, optional phone, request type, area of interest and your message.
  • Analytics data — none at present. No analytics or tracking scripts are installed on this site.
  • Technical logs — standard server request data (e.g. IP address, browser type) processed for security and reliability.

3. Purpose of processing

  • To respond to your request and route it to the correct internal track.
  • To maintain the security, stability and performance of the website.

4. Legal basis

Depending on the applicable framework (e.g. the EU General Data Protection Regulation), we rely on:

  • Consent — for contacting us via the form, and for any optional cookies should they be introduced.
  • Legitimate interest — for essential security, fraud prevention and basic website operation.
  • Pre-contractual steps — where your request concerns a possible partnership, investment or engagement.

5. Data retention

Contact submissions are kept for no longer than 6 months from the date of your enquiry, unless a longer period is required to manage an ongoing relationship or to meet a legal obligation. After that they are deleted or anonymised. Server logs are kept for a limited period for security and reliability.

6. Who else processes your data

We do not sell or trade personal data. A small number of service providers process it on our behalf, strictly to run this website:

  • FormSubmit (formsubmit.co) — receives what you type into the contact form and relays it to our mailbox. It sees every field you submit.
  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — serves the typefaces used on this site. Loading a font transmits your IP address to Google.
  • Our hosting provider — stores the site and processes standard server logs for security and reliability.
  • Our email provider — stores enquiries once they arrive in the mailbox.

No web analytics are currently installed on this site. If analytics are added later, this policy will be updated before they are switched on.

7. Transfers outside the EU/EEA

FormSubmit and Google Fonts are operated from outside the European Economic Area, so submitting the form or simply loading a page may transfer limited personal data — the contents of your enquiry, or your IP address — to a third country. Where such a transfer takes place, it is made on the basis of the relevant provider’s standard contractual clauses or equivalent safeguards. If you would rather not use these services, contact us directly by email instead of using the form.

8. Data minimisation

We ask only for the information needed to respond to your request. Please do not submit confidential project data, BIM/IFC models, contracts or financial records through this public website.

9. Your rights

Where GDPR or a comparable law applies, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your supervisory authority.

10. Data controller and contact

The data controller is Baltic House RE OÜ, registry code 11155779, registered in Estonia — the company’s registered details are public in the Estonian business register. For any question about this policy, or to exercise your rights under the GDPR, use the contact form, which reaches the operator’s team directly. A dedicated data-protection address will be published here once it is in service.