Privacy Policy

1. General Provisions
These Data Protection Terms describe how OÜ Energia Kapital (hereinafter the Company)
processes personal data in the course of its business activities.

The Company operates on a B2B model and does not provide services to private
individuals. We process only the work-related personal data of representatives of legal
entities (such as employees, management board members, contact persons of clients,
partners, and suppliers).
The Company processes personal data in accordance with the EU General Data Protection
Regulation (EU) 2016/679 (GDPR) and applicable Estonian legislation.

2. Data Controller
OÜ Energia Kapital
Registry code: 12182383
Address: Saare County, Saaremaa parish, Easte village, Sõnajala, 93212
Email: mikk@energiakapital.ee
Phone: +372 5099171

3. Categories of Personal Data Processed
We process only work-related contact data connected to an individual’s role as a
representative of a legal entity:

• first and last name
• job title / role within the company
• work email address
• work phone number
• name of the company represented
• business-related correspondence and communication history

The Company does not collect or process private (non-work-related) personal data of
individuals or special categories of personal data.

4. Purposes and Legal Bases for Processing
We process personal data for the following purposes:

5. Sources of Personal Data
Personal data may be obtained:

• directly from the individual (e.g., inquiry via website, email communication, business cards, meetings);
• from the individual’s employer or contracting partner;
• from public sources (e.g., Business Register etc.).

6. Data Retention
Personal data is retained:

• for the duration of the business relationship;
• after the end of the business relationship, as long as necessary to:

o comply with accounting and tax obligations;
o establish, exercise, or defend legal claims.
Outdated or unnecessary data is deleted or anonymized.

7. Disclosure of Personal Data
Personal data may be disclosed to:

• IT service providers (e.g., email, cloud services) acting as data processors;
• accounting, legal, and other professional advisors;
• public authorities where required by law.

Personal data is not sold or shared with third parties for marketing purposes.
If data is transferred outside the European Economic Area, appropriate safeguards required
under GDPR will be ensured.

8. Rights of the Data Subject
Data Subjects have the right to access the data we have collected. To do this, we ask you to
submit a request for information that we will respond to as soon as possible, but not later
than within one month.
We refuse to comply your request to access data, if it may:
- damage the rights and freedoms of other parties;
- undermine national security;
- prevent or impede the prevention, detection or prosecution of a crime or the
execution of sentences.
Additionally, you have the right to:
- request for us to correct inaccurate personal data;
- obtain information about Data Subject in a structured, commonly used and machine-
readable format, and to transmit it to another service provider under certain
circumstances;
- take back the consent in the case of personal data processing based on your consent
(in particular the consent given for direct marketing purposes);
- demand the restriction of processing or the deletion of personal data if this is not in
conflict with the purpose and performance of the contract entered into or the
performance of obligations arising from the law.
If you have any questions about the processing of your personal data by OÜ Energia Kapital,
kindly send an mail to mikk@energiakapital.ee.
If you find that the processing of your personal data violates your rights, you can also turn to
the Estonian Data Protection Inspectorate (Väike-Ameerika 19, Tallinn 10129, email address
info@aki.ee) or the court.

9. Data Security
The Company implements appropriate technical and organisational security measures to
protect personal data against unauthorised access, disclosure, alteration, or destruction.

10. Amendments
The Company reserves the right to update this Privacy Policy. The current version is always
available on our website.