Who we are
The controller of personal data is Pinna Auto OÜ. Website address: https://pinnaauto.ee. For questions about personal-data processing, contact us at info@pinnaauto.ee.
Personal data we process
We process only the information you voluntarily provide in booking and contact forms: name, phone number, email address, vehicle registration number, selected service, preferred time and message text.
Purposes and legal bases
We use the data solely to process your request, contact you, book a service and arrange vehicle maintenance. The legal basis is your consent given when submitting the form and the steps necessary to respond to your request and perform the service arrangement. We do not use data for automated decision-making or profiling.
Cookies
The website may use only technically necessary cookies for the correct operation of the website and its forms. They are not intended to track visitors for advertising purposes. You can restrict or delete cookies in your browser settings; this may affect some website functions.
Who can access the data
Only authorised Pinna Auto OÜ employees have access to the data, limited to what is necessary to handle your request or service booking.
How long we retain your data
We retain data no longer than necessary to handle the request, provide the service and meet legal obligations. Once those purposes have been achieved, the data are deleted or anonymised unless retention is required by law.
Your GDPR rights
Under the GDPR, you may request access to and a copy of your data, rectification of inaccurate data, erasure, restriction of processing, data portability and object to processing where provided by law. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal. To exercise your rights, email info@pinnaauto.ee.
Where your data is sent
We do not sell, transfer or disclose your personal data to third parties. Data are processed within Pinna Auto OÜ only for the purposes stated in this policy. An exception is possible only where disclosure is expressly required by applicable law.