Updated 17.08.2026. The data controller is AUTOCO OÜ, registry code 14616615, registered address Punane tn 26, 13619 Tallinn, email info@autoco.ee, phone +372 511 2422.
1. Data we process
We process information a person provides in an enquiry: name, phone, email, chosen vehicle, finance or trade-in details and message. For a transaction, we process contract, payment and correspondence data. Website analytics are collected only after consent.
2. Purpose and legal basis
Answering an enquiry and preparing a contract rely on pre-contractual steps. Completing a transaction relies on contract, retaining accounting records on law, and service security and customer support on legitimate interest. Analytics and marketing messages rely on consent, which can be withdrawn.
3. Recipients
Access is limited to staff and providers who need data for hosting, IT, forms, accounting or support. Finance-application data are sent to the selected finance provider only to process the application. We do not sell personal data.
4. Retention
Ordinary enquiries are retained for up to 24 months unless a transaction or legal claim requires longer. Contracts and accounting records are generally retained for 7 years. Analytics retention depends on the cookie lifetime.
5. Processing outside the EEA
If a provider processes data outside the European Economic Area, safeguards permitted by the GDPR are used, such as European Commission standard contractual clauses.
6. Your rights
Where legal conditions apply, you may request access, correction, deletion, restriction, portability or object to processing. Consent may be withdrawn at any time. Send requests to info@autoco.ee.
7. Complaint
Please contact us first if you have concerns. You may also complain to the Estonian Data Protection Inspectorate.
8. Security and changes
We use reasonable technical and organisational safeguards. This policy is updated when services or legislation change, and the new date is published here.
