Privacy Policy

Controller for personal data: Konstantin Tokarenko — private individual trading via an entrepreneur account (ettevõtluskonto), not VAT-registered, Tallinn. Postal address for letters and claims: Auna 9-12, Tallinn. Email: master@montagetallinn.ee. If your order is invoiced by Plaadiriik OÜ (reg. code 17482204), the data needed to carry out the work and issue the invoice is shared with it; you are told this when agreeing on the order.

When you submit a request on the website, we receive: your name (if given), phone and/or email (at least one contact method is required), a description of the task, photos (up to 10), the services you selected, and the page and language of the site the request was sent from.

Photos are automatically stripped of EXIF metadata (location, camera model, and similar) and resized before saving; the original filename from your device is never stored.

If you answer follow-up questions after submitting the request, we save your answers — for example, the district, timing, or task details.

We also automatically record where you came from: advertising UTM tags (if present), the domain of the external referrer (the domain only, not the full URL) and the page you entered the site on. In addition, we record an irreversible hash of your IP address — the IP address itself is never stored, the hash is used only to protect the request form from automated abuse.

To assess the task, assign a master, contact you, and carry out the order. The IP hash is used only to protect the request form from automated abuse.

• Responding to your request, assessing the task, and carrying out the work — preparing and performing a contract with you (GDPR Art. 6(1)(b)).
• Forwarding a request to a specialist company or workshop — your consent (GDPR Art. 6(1)(a)); you can withdraw consent at any time by emailing master@montagetallinn.ee — this won't affect a forwarding that already happened, but stops it going forward.
• Protecting the request form from spam (IP hash) and the deletion log — our legitimate interest in protecting the site and being able to confirm a deletion actually happened (GDPR Art. 6(1)(f)).
• Accounting records (if an invoice was issued for your order) — a legal obligation under Estonian law (GDPR Art. 6(1)(c)).

• The Montage Tallinn master who carries out your task.
• Plaadiriik OÜ (reg. code 17482204) — only if your order needs a company invoice; it then receives the data needed to carry out the work and issue the invoice.
• Specialist companies (gas, connecting to 230V wiring, major plumbing, major renovation, furniture restoration) — only if you chose to forward your request to such a specialist and separately ticked consent for it (the checkbox is unchecked by default). Without this consent, the request is still saved with us but is not forwarded anywhere — in that case, we contact you ourselves.
• If the job is done by a specialist we find for you (for example, a plumber), we pass on your name, contact details, address and the job description with photos — only for that job.
• We receive a notification of a new request by email (through the owner's existing zone.ee mailbox) and on the owner's private messaging channel. That shortened message deliberately does not include your name, phone, email, or full address: only the request number, status, language, selected services, district (if given), a short task description (contact details in the description text are masked automatically), the photo count, and a link to the full request. Full data, including contact details, is available only by email and via a secure link to the request.
• We do not sell or pass your data to advertising companies.

Requests and photos are stored in a Supabase database (cloud, EU (Frankfurt) region). The website is hosted on Vercel. Email notifications are sent through the owner's existing zone.ee mailbox.

• photos — 90 days;
• request data (name, phone, email, description, follow-up answers) — 24 months, after which it is anonymized: these fields are deleted, leaving only the request number, date, services, language, and status;
• the text of request notifications (the email and Telegram card content) in the delivery log — approximately 30 days, after which the text specifically is cleared; the record of the delivery attempt itself (status, date, notification type) remains, without the text.

We use anonymous visit statistics from Vercel Web Analytics. It does not use cookies and cannot identify you — it does not need a consent banner.

Essential storage. Your browser stores your cookie choice and, for the visit, where you came from (ad tag and first page). This is needed for the site and the request form to work.

Google Analytics 4 — only if you click "Accept". We collect visit statistics: pages viewed, where you came from, clicks on the phone and WhatsApp buttons, and whether a request was sent. Your name, phone, email, request text and photos are not sent to Google Analytics. This data also helps us measure Google Ads. The provider is Google Ireland Limited; Google may process data outside the EU under its own terms. Google Analytics cookies are kept for up to 2 years.

If you click "Decline", Google Analytics is not loaded.

You can change your choice at any time via "Cookie settings" at the bottom of every page.

The site stores in your browser (not on the server): your chosen theme (light/dark); if you've already submitted a request — that request's number and the list of services you selected, so the right information can be shown on the next page; your choice on the Google Analytics cookie banner (`mt-cookie-consent`); and, for the visit, where you came from — the ad tag and first page (`mt_attr`, sessionStorage, cleared when the tab closes). This data stays only in your browser.

We publish photos of completed work only with the client's consent, with no faces, addresses, or house numbers, and with metadata removed. Photos are stored in Sanity (the site's content service) — publicly, like the site itself. To ask for a photo to be removed, email master@montagetallinn.ee.

On the site we show reviews published on our Google profile — word for word, with the name and first letter of the surname, exactly as any visitor to Google sees them. To have your review removed from the site, write to us.

You have the right to: access your data, have it corrected, have it deleted, restrict its processing, object to its processing, have it transferred to another controller, and withdraw consent at any time (where processing is based on consent). To use any of these rights — for example, to ask us to delete your request, photos, and correspondence — email master@montagetallinn.ee, giving the request number or the contact details you submitted it with.

If you believe we have violated your rights when processing your personal data, you can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) — www.aki.ee.

The services we use may process data outside the EU under their standard contractual clauses. This applies in particular to website hosting (Vercel) and the notification channel (Telegram). We state only this fact and nothing more — the details of any transfer are set by those services' own terms.

We update this page when the terms, data retention periods, or the set of services we use change.