Privacy Policy
This policy explains how Scandikodu OÜ processes your personal data when you use kinn.ee, ask for an offer or sell us an apartment. We have kept it as plain as we can — if anything is unclear, write to ost@kinn.ee.
1. Who is responsible for your data
The controller is Scandikodu OÜ (registry code 16205448), Juhkentali tn 8, 10132 Tallinn, Estonia. Kinn.ee is Scandikodu OÜ’s direct apartment-buying service.
Data protection questions: ost@kinn.ee, +372 5558 6947.
2. What data we collect
- Contact details: name, phone number and email address.
- Apartment details: address and flat number, floor area, number of rooms, floor, year built, energy class, condition, when you want to sell, your asking and minimum price, and anything else you enter yourself (e.g. a listing link or a comment).
- From public registers: when you enter an address, we look up the building in the Estonian building register (EHR) and the address in the address data system (In-ADS).
- Technical and usage data: IP address, device and browser details, pages visited, ad click IDs (e.g. gclid, fbclid) and campaign parameters (UTM). Analytics and marketing cookies are used only with your consent.
- Communication: calls, emails and messages you exchange with us.
- Transaction data: if you sell us an apartment, the deal and payment details (e.g. personal ID code and bank account) required by the notary and the law.
3. Why we use data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Preparing an offer and talking to you | Steps taken at your request before a contract (GDPR art. 6(1)(b)) |
| Sending a confirmation email after your request | Pre-contractual steps (art. 6(1)(b)) |
| Preparing and completing the purchase at a notary | Performance of a contract (b) and legal obligations such as accounting and anti-money-laundering rules (c) |
| Prioritising requests, keeping the service secure and preventing misuse | Legitimate interest (f) |
| Analysing how the site is used and measuring advertising | Your consent (a), which you can withdraw at any time |
Requests are sorted automatically (e.g. by district and apartment details) so we can reply faster. This has no legal effect on you — an offer is always made by a person.
4. Who we share data with
We do not sell personal data. We use trusted service providers that process data on our instructions:
| Recipient | Purpose |
|---|---|
| Vercel | Website hosting |
| Supabase | Database where requests are stored |
| Telegram | Alerting our team about a new request |
| Twilio SendGrid | Sending confirmation emails |
| Google (Analytics, Ads, Maps) | With consent: visit statistics and ad measurement. With consent we also send Google Ads a hashed (SHA-256) email and phone number and the click ID, to measure which ads bring requests. Maps shows the map. |
| Meta Platforms (Pixel and Conversions API) | With consent: ad measurement; we send a hashed email and phone number |
| Mixpanel | With consent: usage analytics, including sampled session replay with form fields and form text masked |
| Notary, banks, land register | Completing the purchase |
| Public authorities | Where the law requires it |
5. Transfers outside Europe
Some providers (e.g. Google, Meta, Vercel, Mixpanel, Twilio SendGrid, Telegram) may process data outside the European Economic Area. Where they do, we rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
6. How long we keep data
- Request data: up to 3 years from our last contact if no deal is made. Then we delete it.
- Transaction data and accounting records: 7 years (Estonian Accounting Act).
- Cookies and browser storage: for the periods in the table below.
7. Cookies and your choice
Necessary storage always works. Analytics and marketing cookies load only if you agree. If you decline, Google runs without cookies and Meta and Mixpanel do not load at all.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| kinn_consent | Kinn.ee | Remembers your cookie choice (necessary) | 12 months |
| kinn_attribution, kinn_first_touch | Kinn.ee | Links a request to the ad or campaign you came from | Session / 90 days |
| kinn_lead_draft_*, kinn_lead_contact_* | Kinn.ee | Keeps an unfinished form in your browser (necessary) | Until the form is sent or browser data is cleared |
| _ga, _ga_* | Google Analytics | Visit statistics (with consent) | Up to 2 years |
| _gcl_au | Google Ads | Ad click measurement (with consent) | 90 days |
| _fbp, _fbc | Meta | Ad measurement (with consent) | 90 days |
| mp_* | Mixpanel | Usage analytics (with consent) | Until browser data is cleared |
You can change your choice at any time:
8. Your rights
- Access your data and get a copy.
- Have inaccurate data corrected.
- Have data deleted when we no longer have a reason to keep it.
- Restrict processing, or object to processing based on legitimate interest.
- Receive the data you gave us in a machine-readable format (portability).
- Withdraw consent at any time — this does not affect processing done before.
Write to ost@kinn.ee — we reply within one month. If you believe we are breaching your rights, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee).
9. Security
Data travels over an encrypted connection (HTTPS). Only staff who need requests can access them, and server keys never reach the browser.
10. Changes
If this policy changes, we publish the new version on this page with its effective date. We also announce material changes on the website.