Privacy Policy

This Privacy Policy explains how Ambroosius OÜ processes personal data. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

1. Data controller

Ambroosius OÜ
Registry code: 11321173
Address: Pärnu maakond, Tori vald, Sindi linn, Põllu tn 26, 86705
Email: info@ambroosius.ee
Phone: +372 5341 4299

For any question about this Privacy Policy or your personal data, please contact us at the email or phone number above.

2. Our activities

We provide construction and earthwork services, including: excavation and digger work; operation and rental of earth-moving machinery; tipper truck services; plumbing; water and sewerage works (both external utility lines and internal installations); preparation of house and warehouse foundations; groundwork for utility infrastructure (cables, water mains, sewers and similar); landscaping; sale of sand, gravel and other aggregate materials; planning and installation of sanitary networks; and snow ploughing.

In the course of these activities we process a limited amount of personal data, as described below.

3. What personal data we process, for what purpose and on what legal basis

3.1 Inquiries by email.

 

When you contact us by email, we receive whatever information you choose to provide — typically your name, contact details, the address of the work site, and job-specific details (such as site dimensions, property measurements, photos, and a description of the work).

Purpose: responding to your inquiry and, where applicable, preparing a quote.
Legal basis: our legitimate interest in responding to inquiries and, where a contract is being prepared, taking steps prior to entering into a contract (Art. 6(1)(b) and 6(1)(f) GDPR).

​

3.2 Inquiries by phone.

 

We treat phone calls as anonymous unless and until a contract is concluded. We do not log or store phone numbers of callers.

Legal basis: our legitimate interest in being reachable for business inquiries (Art. 6(1)(f) GDPR).

​

3.3 Performance of a contract.

 

Once we agree to carry out a job, we use the information necessary to deliver the service: client name, contact details, work site address, and job-specific information.

Purpose: performing the agreed work.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

​

3.4 Invoicing and accounting.

 

We issue invoices for the services provided. Invoices contain the client's identifying details and a description of the service.

Purpose: fulfilling our statutory accounting and tax obligations.
Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR), in particular the Estonian Accounting Act (Raamatupidamise seadus) and the Value-Added Tax Act (Käibemaksuseadus).

​

3.5 Website (ambroosius.ee).

 

Our website is informational only. It does not contain contact forms, comment fields, login areas, newsletter subscription or any other input fields, and we do not use third-party advertising, marketing or analytics tracking. The website uses only cookies that are strictly necessary for its basic operation. As is standard for any website, the underlying server infrastructure may briefly process technical data (such as IP addresses) for the purpose of operating and securing the site.

Legal basis: our legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR).

​

4. Recipients of personal data

We do not sell, rent or share personal data for marketing purposes. Personal data may be made available to the following categories of recipients, strictly to the extent necessary:

• our employees, who receive the information needed to carry out a specific job on site;

• our external accountant, for bookkeeping, invoicing and statutory reporting;

• our IT service provider (email and website hosting), based in the European Economic Area, which processes data only as necessary to provide those services;

• third parties whose approval, agreement or coordination is required for the customer's project — such as utility operators, network operators, road owners and project partners — strictly to the extent necessary for the project;

• public authorities (such as the Estonian Tax and Customs Board), where disclosure is required by law.

​

5. Transfers outside the EEA

We do not transfer personal data outside the European Economic Area.

6. Retention periods

​

Pre-contract email inquiries: deleted without undue delay if no contract is concluded.
Email correspondence concerning a contracted job: retained until the job is completed, then deleted. Where job-specific information is needed for execution of the work on site, the relevant content may be printed; printed working materials are destroyed by shredding once they are no longer needed.
Invoices and other accounting source documents: retained for 7 years from the end of the relevant financial year, as required by §12 of the Estonian Accounting Act. After this period, paper documents are destroyed by shredding and disposed of in accordance with applicable Estonian waste and recycling rules.
Phone numbers of callers: not stored.

​

7. Automated decision-making

We do not use automated decision-making or profiling.

8. Your rights

Under the GDPR you have the right to:

• request access to the personal data we hold about you;

• request rectification of inaccurate or incomplete data;

• request erasure of your personal data;

• request restriction of processing;

• object to processing carried out on the basis of our legitimate interest;

• ask for your personal data in a format that can be transferred to another service, where applicable.

 

To exercise any of these rights, please contact us at info@ambroosius.ee. We will respond within one month of receiving your request. We may ask for additional information to verify your identity before fulfilling the request.

9. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR or Estonian data protection law, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

​

Address: Tatari 39, 10134 Tallinn, Estonia
Email: info@aki.ee
Website: www.aki.ee

​

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on our website at ambroosius.ee. Material changes will be reflected by an updated "Last updated" date at the top of this page.