Privacy
This page explains which personal data Euroopahanked processes, why it is used and what rights users have.
We process company data, user name, email, phone, personal code for Smart-ID, Google account email verification, CPV preferences, notification settings, invoices, paid period, collaboration listings and responses. Tender AI chat content is not stored permanently; we only store usage metadata such as time, tender, company, model, status and technical metrics.
Data is used to perform the contract, manage accounts and profiles, provide tender search and billing, send notifications based on consent, protect security and service quality based on legitimate interest, and meet legal accounting obligations.
Data may be processed by our technical providers: hosting and database services, email service, Smart-ID/SK, Google OAuth, OpenAI and public source services such as the Business Register, RHR and TED.
If we use providers whose processing may take place outside the European Union or European Economic Area, we rely on their contractual and technical safeguards, such as standard contractual clauses where required.
Account and profile data is retained while the service is used. Invoices are retained to meet accounting requirements. Notification logs, technical logs and usage statistics are retained for a reasonable limited period. When data is no longer needed, it is deleted or anonymised.
Users have the right to request access, correction, deletion, restriction of processing, data portability, object to processing and withdraw consent. Users also have the right to lodge a complaint with the Estonian Data Protection Inspectorate.
We use necessary session and preference cookies, for example for sign-in, CSRF protection, language and color theme. Analytics or advertising cookies are not used until they are separately added and described.
For privacy questions and data subject requests, contact the service provider by email.