Privacy policy

This privacy policy explains what personal data AS Retent collects through its website, what we use it for, how long we keep it and what rights you have. We follow the General Data Protection Regulation (GDPR) and Estonian law.

Who processes the data

The controller of personal data is AS Retent (registry code 10126713), Voika 14a, 61601 Nõo, Tartumaa, Estonia. For data protection matters, write to retent@retent.ee or call +372 7 301 400.

What data we collect

We collect the data you give us yourself, the technical information needed for the website to work and, with your consent, data about how you use the website.

Quote request form: name, company, e-mail, phone, country, sector, project type and timeline, message, products added to the request, and files (for example drawings or plans).
Contact form: name, e-mail, phone, sector and message.
Together with the form, we store the page from which the request was sent and the selected language and region, so that the request reaches the right sales manager.
If you write to us or call us directly, we store the correspondence and the contact details we need to respond to your request.

The website has no user accounts or online shop, and we do not ask for your personal identification code.

What we use the data for

To respond to your request, prepare a quote and contact you. The legal basis is your consent, which you give when you submit the form, and the steps necessary for entering into a contract (points (a) and (b) of Article 6(1) GDPR).
To perform the contract if the quote becomes an order: design, manufacturing, delivery and installation (point (b)).
To comply with accounting and other legal obligations (point (c)).
To ensure the security and operation of the website, for example to prevent spam (legitimate interest, point (f)).
To analyse how the website is used and to measure the effectiveness of advertising, if you have given your consent to this in the cookie notice (point (a)).

We do not make automated decisions based on the data that have legal or similarly significant effects on you, and we do not send you newsletters without your separate consent.

Who we share the data with

Your request is seen by Retent employees who respond to requests from your region. We use trusted service providers who process the data only on our instructions, for example our web hosting and e-mail service provider. Website data is stored on servers located in the European Union. If a service provider processes data outside the European Economic Area, this is done only with the safeguards provided for in the GDPR, such as the European Commission's standard contractual clauses.

We do not sell the data or pass it on to third parties for marketing. To fulfil an order, we may share the necessary data with partners who help with delivery or installation.

How long we keep the data

Requests, contact form messages and attached files: up to 3 years after our last communication, so that we can answer any later questions.
Data relating to contracts and accounting: for as long as the law requires (7 years for accounting source documents).
Analytics data: up to 14 months.
Technical web server logs: for a short period, to ensure security.

When the data no longer needs to be kept, we delete it or anonymise it.

Cookies and browser storage

The website uses cookies and browser storage for three purposes. Necessary cookies and storage are always in use. We load analytics and marketing cookies only if you have allowed them in the cookie notice.

Necessary: information the site needs in order to work, for example the selected region, the products added to your request and your cookie choice. This stays on your device and is not used to track you.
Analytics: helps us understand how visitors use the website, for example which pages are viewed and for how long. For this we use Google Analytics, which collects information about the device, browser, approximate location and visit.
Marketing: makes it possible to measure the effectiveness of advertising and to show more relevant content, for example through Google's advertising services.

Providers of analytics and marketing services, such as Google Ireland Limited, may also process data outside the European Economic Area, including in the United States. In that case, the transfer takes place on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

You can change your choice at any time via the ‘Cookies’ link in the website footer. You can also delete cookies in your browser settings.

The map links for our offices open Google Maps, where Google's terms apply.

Your rights

You have the right to:

obtain information about your data and a copy of it;
have inaccurate data corrected;
request the erasure of your data if we no longer need it and the law does not require us to keep it;
restrict the processing of your data or object to it;
receive the data you have provided in a machine-readable format;
withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

Write to retent@retent.ee and we will reply within one month. To verify your identity, we may ask you to sign your request digitally.

How we protect the data

The website uses an encrypted connection (HTTPS). Only employees authorised to do so can access requests and files. If you suspect that something is wrong with your data, let us know immediately.

Complaints

If you believe that we are infringing your rights when processing your data, please contact us first. You also always have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee or info@aki.ee, or to go to court.

Changes

We update this page when the way we process data changes. Effective from 9 November 2026.