Privacy Policy

1. General Provisions & Data Controller

This Privacy Policy sets out the principles under which Greenhaven OU (hereinafter "we", "us", or "Green Haven") collects, processes, and protects personal data of natural persons (hereinafter "you" or "the user") through the website greenhaven.ee and related commercial activities.

We adhere strictly to Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and relevant national data protection legislation.

2. What Data We Collect & Legal Basis

We process personal data solely for specific, legitimate, and transparent business purposes:

• Quote Inquiries & Consultation Forms: When submitting an inquiry online or contacting us by email, we process your name, corporate email address, telephone number, organization name, and technical project parameters (such as surface dimensions and structural roof type). The legal basis is taking steps prior to entering into a contract or your explicit consent.
• Contract Performance & Service Delivery: To prepare engineering specifications, execute project installations, and deliver ongoing maintenance services.
• Technical Logs & Security: To maintain secure operation of the web platform, server logs automatically capture IP addresses, browser specifications, and connection timestamps.

3. Cookies & Consent Management

The greenhaven.ee website uses technical cookies and browser local storage to preserve language settings, protect against automated abuse, and analyze aggregate visitor traffic.

• Strictly Necessary Cookies: Essential for platform security, user navigation, and storing cookie consent states. These cannot be disabled.
• Analytics & Preferences: Optional cookies that help measure traffic metrics and refine performance. These are only activated upon your explicit consent.

4. Data Retention & Information Security

Personal data is retained only for as long as necessary to fulfill the operational purpose for which it was gathered, or to comply with statutory accounting and tax regulations (e.g. 7 years under statutory financial rules).

We employ modern technical safeguards including TLS/HTTPS encryption, role-based access restrictions, and secure cloud storage protocols within European Union territory.

5. Data Disclosures & Third-Party Processors

We do not sell, lease, or distribute your personal information to third parties for commercial marketing purposes. Data is disclosed only to verified technical processors operating under binding data processing agreements:

• Edge hosting and cloud infrastructure providers within the European Union.
• Transactional notification and mail dispatch services.
• Professional legal and accounting advisors as required by law.

6. Your Rights Under GDPR

Under European data protection laws, you have comprehensive rights regarding your personal records:

• Right of Access: Request confirmation and copies of personal data processed about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where statutory grounds apply.
• Right to Restriction & Objection: Object to processing based on legitimate interests or request processing limits.
• Right to Data Portability: Receive your provided records in a structured, machine-readable format.

To exercise your rights, please submit a written or digitally signed request to info@greenhaven.ee. We will respond within 30 calendar days.

7. Supervisory Authority

If you consider that our processing of your personal data infringes applicable data protection regulations, you have the right to lodge a formal complaint with the competent supervisory authority: