Privacy Policy
We are committed to protecting your privacy and handling your data in an open and transparent manner. This privacy policy explains how we collect, use, disclose, and protect your personal data when you use our online platform or interact with us.
Who we are
We are Eesti Kodu Finance, a financial services provider located at 139e Pärnu maantee, 5th Floor, Tallinn, Harju County, 11317 Estonia. We are the data controller responsible for processing your personal data as described in this policy.
Data we collect
We may collect personal data about you in various ways when you use our service or communicate with us. This data may include:
Information you provide to us directly:
Identification and contact information, such as your name, address, date of birth, and nationality.
Financial information, such as income details, employment status, assets, liabilities, bank account details, and credit history, which is necessary for providing financial services like mortgage brokerage or loan advisory.
Information about your property interests or needs related to our services.
Details from documents you provide as part of applications or consultations.
Any other information you choose to provide when contacting us or using our forms.
Information collected automatically when you use our site:
Technical data, including your IP address, browser type and version, operating system, device information.
Usage data, including information about how you interact with our service, such as pages visited, time spent on sections, and clickstreams. This is often collected through cookies and similar technologies.
Information from other sources:
We may receive information from third parties, such as credit reference agencies, public registers, or business partners, to the extent permitted by applicable law and necessary for providing our services.
How we use your data
We use your personal data for specific purposes based on a legal basis. These purposes include:
- Providing our services: To assess your eligibility for financial products, assist you with mortgage applications, provide financial advice, process your requests, and deliver the services you have engaged us for. This includes mortgage brokerage, home loan advisory, financial planning, investment advice related to property, and assistance with property valuation.
- Communication: To respond to your inquiries, provide updates about your applications or consultations, and send you relevant information about our services, if you have consented or where there is a legitimate interest.
- Improving our services: To understand how our service is used, analyze trends, troubleshoot issues, and enhance the functionality and user experience of our online platform.
- Legal and regulatory compliance: To comply with applicable laws, regulations, and professional obligations, such as anti-money laundering (AML), know your customer (KYC) requirements, and reporting obligations. This may involve verifying your identity and conducting necessary checks.
- Protecting our interests: To detect and prevent fraud, protect our rights and property, and defend against legal claims.
Legal basis for processing
We will only process your personal data when we have a lawful basis to do so. The legal bases we rely on include:
- Performance of a contract: Processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (e.g., processing a loan application).
- Legal obligation: Processing is necessary for compliance with a legal or regulatory obligation to which we are subject (e.g., AML/KYC checks).
- Legitimate interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, provided your fundamental rights do not override those interests (e.g., improving our services, preventing fraud, communicating with you where permissible).
- Consent: In certain cases, we may rely on your explicit consent to process your data for specific purposes (e.g., sending you marketing communications). You have the right to withdraw your consent at any time.
Sharing your data
We may share your personal data with third parties in the following circumstances and always under strict confidentiality agreements and legal obligations:
- Service providers: We may share data with trusted third-party service providers who perform functions on our behalf, such as IT support, hosting, analytics, or professional advisors. These providers are contractually bound to protect your data and use it only for the purposes for which it was disclosed.
- Financial institutions and partners: To provide our services, we may share your data with banks, lenders, insurance companies, or other financial institutions relevant to your applications or financial planning needs, but only with your explicit consent or as necessary for the service you request.
- Regulatory and legal authorities: We may disclose your data if required by law, regulation, or legal process, or in response to a valid request from government or regulatory authorities.
- Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.
Data security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, and secure storage systems. However, please note that no method of transmission over the internet or electronic storage is completely secure.
Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the type of data and the purpose of processing.
Your data protection rights
Under GDPR and other applicable data protection laws, you have certain rights regarding your personal data:
- The right to access: You have the right to request a copy of the personal data we hold about you.
- The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- The right to erasure: You have the right to request that we delete your personal data under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data under certain conditions, particularly where we process it based on legitimate interests or for direct marketing.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
- The right to lodge a complaint: You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not complied with applicable data protection laws.
Cookies
Our service may use cookies and similar tracking technologies to collect and use personal data about you. Cookies are small text files placed on your device. We use cookies to operate our service, enhance your experience, and analyze usage. You can manage your cookie preferences through your browser settings.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated policy will be posted on our online platform.
Contact us
If you have any questions or concerns about this privacy policy or our data practices, please contact us by mail at our physical address:
Eesti Kodu Finance
139e Pärnu maantee, 5th Floor
Tallinn, Harju County, 11317 Estonia