OTEXE Global Solutions OÜ
Registry Code: 16536027
Address: Vesivärava 50-201, 10152 Tallinn, Estonia
VAT Number: EE102515833
(hereinafter referred to as "the Company")

This Privacy Policy (hereinafter "the Policy") explains how OTEXE Global Solutions OÜ collects, processes, stores, and protects personal data in accordance with the European Parliament and Council Regulation (EU) 2016/679 (hereinafter "GDPR") and the Personal Data Protection Act of the Republic of Estonia.

1. DEFINITIONS

1.1. Personal Data – Any information relating to an identified or identifiable natural person.
1.2. Data Subject – A natural person whose personal data is being processed.
1.3. Data Controller – OTEXE Global Solutions OÜ, which determines the purposes and means of processing personal data.

2. TYPES OF PERSONAL DATA PROCESSED

2.1. The Company may collect and process the following personal data:

• Name, surname;

• Contact details (email, phone number, address);

• Billing information (bank account number, invoice details);

• Data related to construction projects (e.g., property address, project preferences);

• Any other data necessary for contract fulfillment or compliance with legal obligations.

3. PURPOSES OF PROCESSING PERSONAL DATA

3.1. The Company processes personal data for the following purposes:

• Entering into and fulfilling contracts (e.g., providing construction services);

• Managing customer relationships and providing support;

• Billing and accounting;

• Compliance with legal obligations (e.g., tax reporting);

• Improving service quality and marketing (only with consent).

4. LEGAL BASIS FOR PROCESSING PERSONAL DATA

4.1. The Company processes personal data based on the following legal grounds:

• Contractual necessity (GDPR Art. 6(1)(b));

• Legal obligation (GDPR Art. 6(1)(c));

• Legitimate interest (GDPR Art. 6(1)(f)), e.g., managing customer relations;

• Data subject’s consent (GDPR Art. 6(1)(a)), e.g., for marketing purposes.

5. DISCLOSURE OF PERSONAL DATA

5.1. The Company may disclose personal data to third parties (e.g., accountants, construction supervisors) only when necessary for contract fulfillment or legal compliance.
5.2. Third-party recipients must comply with GDPR requirements.
5.3. Personal data will not be transferred outside the European Economic Area (EEA) unless adequate safeguards under GDPR are ensured.

6. RETENTION OF PERSONAL DATA

6.1. The Company retains personal data only as long as necessary for processing purposes or legal compliance.
6.2. Examples of retention periods:

• Contract-related data is retained until fulfillment and the statutory accounting period (typically 7 years);

• Marketing-related data is retained until consent is withdrawn.
  6.3. After the retention period expires, data is deleted or anonymized.

7. DATA SUBJECT RIGHTS

7.1. Data subjects have the following rights:

• Right to access information about their personal data processing;

• Right to request correction or erasure of their data;

• Right to restrict processing;

• Right to data portability;

• Right to object to processing (e.g., direct marketing);

• Right to withdraw consent (where applicable).

7.2. To exercise these rights, data subjects may contact the Company at:
Email: [Your contact email]
Address: Vesivärava 50-201, 10152 Tallinn, Estonia

8. DATA SECURITY

8.1. The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

9. CHANGES TO THIS POLICY

9.1. The Company reserves the right to update this Policy as needed. The latest version will always be available on the Company’s website.