Skip to content
Leiateenus

Legal

Privacy policy

How Leiateenus handles account, enquiry, review, and public business data.

Effective from the date published on leiateenus.ee

1. Introduction

Leiateenus is a service of ADSio OÜ. ADSio OÜ (“we”) processes personal data under the EU GDPR. This policy describes processing that actually happens — not hypothetical payments, marketing, or newsletters.

2. Controller

The controller is:
ADSio OÜ
Registry code: 14619536
VAT: EE102696804
Seat: Ranna tn 6, Võiste alevik, Häädemeeste vald, Pärnu maakond 86501
Email: [email protected]

The product name is Leiateenus / leiateenus.ee. Leiateenus is a service of ADSio OÜ.

3. Data we handle

3.1 Accounts

  • Email address and password hash for account creation and sign-in
  • Name, if you provide one

3.2 Owner claims

  • Claim details used to link you to a business profile
  • Verification codes sent by email (Maileroo)
  • The name you type for a manual claim is compared with public Äriregister board data for ownership review

3.3 Enquiries and the contact form

  • Name, email, optional phone, and message body
  • The selected business when the enquiry concerns a listing

3.3a Conversations and notifications

  • An enquiry opens a conversation on Leiateenus: messages, quotes, timestamps and whether a message was read
  • A personal conversation link (we store only its hash) and a conversation cookie that keeps you signed in to that conversation
  • If you reply by email we store the new part of the email (quoted text removed) and its message ID to avoid duplicates
  • The business owner sees your name, email and phone and may add private notes you cannot see
  • Unclaimed listings receive only your first name and the request; your contact details stay on Leiateenus
  • To stop spam we compare message hashes and keep a hash of blocked senders’ email addresses (never the address)
  • Notification emails (new reply, reminders, a review invitation after completed work) — each has a one-click unsubscribe

3.4 Public business information

  • Name, registry code, address, phone, email, website, services, images, opening hours
  • Source and freshness labels, and owner-verified corrections

3.5 Reviews and security logs

  • Review content, rating, date, and optional name
  • Security and audit logs, IP and device metadata to prevent abuse

4. Purposes

  • Providing search, listings, and business profiles
  • Account administration and owner verification
  • Delivering enquiries to the selected business
  • First-party service measurement (profile views and clicks)
  • Security, abuse prevention, and legal obligations

We do not process payments or checkout transactions. There is no newsletter or marketing campaign.

5. Processors and sharing

We do not sell personal data. We share data only to run the service:

  • Maileroo — sending email (enquiries, verifications, account and contact mail)
  • Dokku hosting — running the application and database
  • The selected business — enquiry and conversation content so they can reply (unclaimed listings get only your first name and the request)
  • Authorities when the law requires it

There is no payment processor.

A business owner can use a button in the conversation that drafts a reply. When they do, the message text and the enquiry fields (without your email or phone, and only your first name) may be processed by an AI service that writes a draft for the owner. The draft appears only in the owner's editing field; the owner reads it and sends it themselves. Nothing is ever sent automatically.

6. Cookies and first-party measurement

Necessary cookies keep you signed in and support security. Banner consent is stored in browser localStorage, not as a separate cookie.

Profile views and contact clicks (call, website, directions) are counted as anonymous daily totals per business in our own database, so owners can see how their profile performs. No IP address, cookie or visitor identifier is stored with them. They are first-party counts, not a third-party pixel or advertising tag. The banner does not gate them today; they are service measurement, not marketing. There are no third-party analytics or marketing cookies.

7. Retention

We keep records only as needed for the service, security, disputes, and legal duties. If you delete your account, we delete your personal data within 30 days unless the law requires a longer period.

Conversations are anonymised automatically 24 months after the last message, and conversations marked as spam after 30 days. On the conversation page you can choose “Delete my data” at any time: we remove your name, contact details and messages from that conversation immediately.

8. Your rights

  • Access, correction, deletion, restriction, portability, and objection
  • A request to unpublish a business profile where you are a verified owner

Use these rights at [email protected].

9. Security

We use ordinary technical and organisational measures (including HTTPS and access control). No internet service is risk-free.

10. Changes

We update this policy when processing changes. The current text is always on leiateenus.ee.

11. Contact and complaints

GDPR requests: [email protected]
You may complain to the Estonian Data Protection Inspectorate:
Website: www.aki.ee
Email: [email protected]