Privacy Policy

Controller

The controller is PnP Grupp OÜ, registration number 16001444, Tartu mnt 43a, Ahtme linnaosa, 31025 Kohtla-Järve linn, Ida-Viru maakond, Estonia.

For privacy questions, contact us at info@pnpgrupp.ee.

Personal data we process

• Contact and company details, such as name, company, work email and phone number.
• RFQ and project information, such as project description, stage, quantity, materials, deadlines, message text and uploaded files.
• Technical and usage data, such as page URL, referrer, UTM tags, GCLID, IP address, browser/device data, server logs and reCAPTCHA data.
• Analytics and marketing data, such as page views, events, cookie identifiers and similar online identifiers where these tools are enabled.

Purposes and legal bases

• To respond to RFQs, questions and project enquiries: steps prior to a contract and our legitimate interest in business communication.
• To assess project feasibility, prepare quotations and organize engineering or sales follow-up: steps prior to a contract and legitimate interest.
• To protect the website, prevent spam and maintain server security: legitimate interest.
• To improve the website and understand campaign performance: consent where required and legitimate interest for essential technical logs.
• To run remarketing or advertising tags through services such as Google Ads, Meta/Facebook and LinkedIn where enabled: consent where required.
• To comply with contracts, accounting, legal claims or regulatory obligations if a customer relationship is created: contract, legal obligation and legitimate interest.

Recipients and processors

Submitted information may be reviewed by PnP Grupp sales, management, engineering and relevant subcontracting staff who need it to respond to the enquiry.

• Hosting, server/Plesk, email, IT administration and website maintenance providers.
• Google services, including Google Tag Manager, Google Analytics/Ads and reCAPTCHA.
• Meta/Facebook Pixel and LinkedIn Insight Tag, if these marketing tags are enabled.
• Professional advisers, authorities or other recipients where required by law or needed to protect legitimate interests.

International transfers

Some service providers may process data outside the European Economic Area. Where this happens, we rely on applicable safeguards such as adequacy decisions, EU Standard Contractual Clauses or other lawful transfer mechanisms.

Cookies, analytics and marketing tags

The website may use Google Tag Manager, Google Analytics, Google Ads/remarketing, Meta/Facebook Pixel, LinkedIn Insight Tag and Google reCAPTCHA. These tools can use cookies or similar identifiers to measure visits, protect forms, analyze campaigns or support advertising.

Where required, analytics and marketing tags are used based on your consent or cookie settings. You can also control cookies through your browser settings.

Retention

RFQ and project enquiry data is kept for up to 3 years after the last communication, unless a longer retention period is required for contracts, accounting, legal claims or compliance.

Server logs and security data are kept for the period necessary for security and administration. Analytics and advertising retention depends on the relevant provider settings and your cookie choices.

Your rights

You may request access, rectification, erasure, restriction, portability and objection to processing where these rights apply. You may withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or another competent supervisory authority.

Security and automated decisions

We use reasonable technical and organizational measures to protect personal data. No internet transmission or storage method can be guaranteed as completely secure.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for website visitors or RFQ senders.

Changes

We may update this Privacy Policy when our website, tools or processing practices change. The date above shows the latest version.