Privacy policy
Last updated: 13.08.2026
This privacy policy explains how KONTABASE processes the personal data of its customers and website visitors. For data contained in the business databases we sell and use in our email marketing service, see the separate Data Protection document.
1. Responsible controller
The controller responsible for your personal data is: Kliima Eksperdid24 OÜ. Registry code: 17494012. Address: Pirni 12, Tallinn. Email: info@kontabase.com
2. What data we collect
Customer data (when placing an order): first and last name or company name and contact person; email address; phone number (if provided); billing data (company name, registry code, address, VAT number); order and payment data. Website visitor data: IP address and device/browser data; website usage statistics; information collected through cookies (see section 4). When making a payment, your card/bank details are processed by the payment service provider; KONTABASE does not store full payment data.
3. Purposes and legal basis of processing
Fulfilment of the order and provision of the service — Contract performance (GDPR Art 6(1)(b)). Issuing invoices and accounting — Legal obligation (Art 6(1)(c)). Customer support and communication — Contract performance / legitimate interest (Art 6(1)(b), (f)). Ensuring the operation and security of the website — Legitimate interest (Art 6(1)(f)). Statistics and service improvement — Legitimate interest (Art 6(1)(f)). Marketing to existing customers — Legitimate interest or consent (Art 6(1)(f)/(a)). Cookies (non-essential) — Consent (Art 6(1)(a)).
4. Cookies
4.1. The website uses cookies to ensure the site works, to analyse usage and to improve the service. 4.2. Necessary cookies are essential for the site to work. Statistics and marketing cookies are used only with your consent, which you can give or withdraw from the cookie banner. 4.3. Cookies can also be managed in your browser settings.
5. Data retention
We retain order and customer relationship data for the duration of the customer relationship and after it ends for as long as is necessary or required by law. We retain accounting source documents for 7 years (Accounting Act). We retain website logs and statistics for a reasonable period.
6. Data sharing and processors
We use trusted service providers that process data on our behalf (processors), for example: web hosting and platform service hosting provider; payment service provider; email and email marketing tools; accounting service; web analytics. Data processing agreements have been concluded with these providers. Data is not sold or transferred to third parties for any purpose other than providing the service or fulfilling a legal obligation.
7. Transfers outside the EU/EEA
If a service provider is located outside the European Union / European Economic Area, we ensure the lawfulness of the transfer with appropriate safeguards (e.g. European Commission standard contractual clauses).
8. Your rights
You have the right to: access your data; request correction of inaccurate data; request erasure of data (the “right to be forgotten”); restrict processing; data portability; object to processing based on legitimate interest, including direct marketing; withdraw your consent at any time. To exercise your rights, contact: info@kontabase.com.
9. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.
10. Complaints
If you believe that the processing of your data breaches legal acts, you have the right to contact the Data Protection Inspectorate (www.aki.ee) or a court.
11. Changes
We may update the privacy policy from time to time. The current version is always available on the Website.
12. Contact
Kliima Eksperdid24 OÜ. Email: info@kontabase.com. Address: Pirni 12, Tallinn.