Privacy
Privacy terms
This page explains which personal data Euroopahanked processes, why it is used and what rights users have.
Controller
- Name
- NSG OÜ
- Registry code
- 16892006
- Address
- Harju maakond, Tallinn, Pirita linnaosa, Puhkekodu tee 76
Data we process
We process company data, user name, email, phone, personal code for Smart-ID, Google account email verification, CPV preferences, notification settings, invoices, paid period, collaboration listings and responses. Tender AI chat content is not stored permanently; we only store usage metadata such as time, tender, company, model, status and technical metrics.
Purposes and legal basis
Data is used to perform the contract, manage accounts and profiles, provide tender search and billing, send notifications based on consent, protect security and service quality based on legitimate interest, and meet legal accounting obligations.
Recipients and service providers
Data may be processed by our technical providers: hosting and database services, email service, Smart-ID/SK, Google OAuth, OpenAI and public source services such as the Business Register, RHR and TED.
International transfers
If we use providers whose processing may take place outside the European Union or European Economic Area, we rely on their contractual and technical safeguards, such as standard contractual clauses where required.
Retention
Account and profile data is retained while the service is used. Invoices are retained to meet accounting requirements. Notification logs, technical logs and usage statistics are retained for a reasonable limited period. When data is no longer needed, it is deleted or anonymised.
User rights
Users have the right to request access, correction, deletion, restriction of processing, data portability, object to processing and withdraw consent. Users also have the right to lodge a complaint with the Estonian Data Protection Inspectorate.
Cookies
We use necessary session and preference cookies, for example for sign-in, CSRF protection, language and color theme. Analytics or advertising cookies are not used until they are separately added and described.
Contact
For privacy questions and data subject requests, contact the service provider by email.