Are you a business?
User account

Privacy Policy

Version date: 1 March 2025

1. Personal data controller

Before Building OÜ (registry code 16849619)

Email: [email protected]

2. Contact person

If you have any questions about the processing of your personal data or wish to exercise any of the rights described in this privacy policy, please contact Before Building OÜ (hereinafter BeforeBuilding) via email at [email protected].

3. Introduction

The purpose of the business operations of BeforeBuilding is to connect clients in the construction sector (i.e. platform visitors, application users, service clients) with relevant service providers (legal persons) via a dedicated online platform (www.beforebuilding.ee). The central feature of this platform is a web application that helps clients find the appropriate service provider in the necessary construction sector (hereinafter the intermediation service). In order for BeforeBuilding to be able to provide the intermediation service, both the clients (e.g. property owners) and service providers in the construction sector must first register as users of the portal.

In the provision of the intermediation service, BeforeBuilding adheres to the relevant legislation governing the processing of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data refers to any information that allows BeforeBuilding to identify a natural person, i.e. the data subject (including data related to a client who is a natural person and a representative of a client who is a legal person).

We have compiled all the information about the processing of personal data in this privacy policy, which explains what personal data BeforeBuilding collects and processes in connection with its intermediation service, how and for what purpose the data are used and how the privacy of data subjects and the security of collected and processed personal data are ensured.

4. Whose personal data and how is it processed and what personal data is collected?

BeforeBuilding processes the personal data of both clients who are natural persons and representatives of clients who are legal persons in connection with the provision of intermediation services.

When registering on the online platform, BeforeBuilding collects the following personal data from the data subject (including both natural persons and representatives of legal persons):

  • given name and surname;
  • email address;
  • postal address;
  • phone number;
  • professional certificate, activity licence, certificate, certificate of competency, membership in professional associations or other organisations.

All of the listed data is provided to BeforeBuilding by the data subject. To ensure the provision of a reliable intermediation service, BeforeBuilding independently collects data from public registers regarding service providers to verify the existence of professional certificates, activity licences, certificates, certificates of competency and memberships in professional associations or other organisations.

When providing the intermediation service, BeforeBuilding also collects information through cookies about the applications, browsers and devices (e.g. computer or mobile device) used by the data subject by storing information in your browser or device.

5. How are personal data processed?

BeforeBuilding processes personal data in accordance with the following principles:

  • processing is lawful, fair and transparent for the data subject;
  • personal data are collected for specific, explicit and legitimate purposes and are not further processed in a manner incompatible with these purposes;
  • personal data are adequate, relevant and limited to what is necessary for the purposes for which they are processed;
  • personal data are retained in a form that allows the identification of data subjects only for as long as necessary to fulfil the purposes for which the data are processed;
  • personal data are processed in a manner which ensures the security of personal data, with appropriate technical and organisational measures in place to protect against unauthorised or unlawful processing;
  • personal data are retained only for as long as necessary to fulfil the specified purpose.

6. What are the purposes and legal bases for processing personal data?

6.1. Purposes

In order for BeforeBuilding to be able to provide the intermediation service to both the client and the service provider, the involved parties (data subjects) must first be identified. By registering on the platform and accepting the terms of use, the contract for intermediation service between the person and BeforeBuilding is considered to have been concluded.

The personal data on a person’s profile is visible only to the service providers registered on the platform from whom the person requests quotes. Other users of the platform do not have access to this personal data. However, all platform users interested in the services have access to the information on the construction service providers who are legal persons (including the details of their representatives who are natural persons).

Based on the contractual relationship and the use of the intermediation service, BeforeBuilding manages the customer relationship, invoices the service providers (legal persons) for the intermediation services and fulfils accounting obligations. In certain situations, it may also be necessary to resolve legal disputes, such as those arising from the contract (both claims against BeforeBuilding and, where applicable, claims by BeforeBuilding against a platform user).

The marketing, intermediation service development and use statistics objectives of BeforeBuilding are also linked to customer relationship management. Where necessary, we may send information to data subjects via email, introducing improvements to the web application and sharing other relevant information.

6.2. Legal bases

BeforeBuilding processes personal data only when there is a legal basis for it. For marketing purposes (including the provision of information), we process personal data only with the consent of the data subject.

We process the first name and surname and contact details of the data subject for the performance of the contract for intermediation service concluded.

In accordance with the law, we process personal data, for example, to fulfil accounting obligations (including the retention of basic documents for the time limit laid down in legislation) and, where necessary, to respond to information requests from public authorities and state agencies.

7. Does the website of BeforeBuilding use cookies?

BeforeBuilding uses cookies on its website www.beforebuilding.ee to enhance the usability of the intermediation service and improve the user experience.

In technical terms, a cookie is a small text file stored in the web browser of the computer or mobile device of the visitor, which allows the website to remember the user’s preferences, allowing them to navigate the site more conveniently.

Our cookie policy provides more information about the cookies used on the website and how you can opt out of cookies. Please note that if you choose to opt out of cookies, some features or services of the website may not function properly.

8. Are personal data transmitted to third parties?

As a general rule, access to the personal data of data subjects is restricted only to designated BeforeBuilding employees for the performance of their duties to ensure the fulfilment of the purposes set out in clause 6 of the privacy policy. All BeforeBuilding employees are bound by strict confidentiality clauses in their employment contracts, which require them to maintain the confidentiality of personal data.

In addition, we transmit personal data to our partners who provide relevant IT services (e.g. cloud service) and accounting services related to the provision of the intermediation service and with whom we have concluded the necessary agreements for the processing of personal data.

We may also transmit personal data to third parties when required by applicable legislation (e.g. investigative bodies, out-of-court proceedings authorities, courts) or when BeforeBuilding needs to use advisory services (e.g. legal aid providers) or debt collection services (e.g. debt collection agencies) in relation to the performance of the contract.

9. Are personal data transferred outside the European Union or the European Economic Area?

As a rule, BeforeBuilding does not transfer personal data outside the European Union (EU) or the European Economic Area (EEA). However, in certain cases, such transfers may be necessary for the purposes of processing the personal data. In such instances, BeforeBuilding undertakes to implement the required measures to safeguard personal data and ensure that transfers outside the EEA comply with applicable regulations.

10. For how long are personal data retained?

BeforeBuilding retains personal data only for as long as you use the online service or for as long as it is justified for the purposes for which the personal data are processed. After this period, data are deleted. The retention period for personal data depends on the specific type of personal data. The same personal data may be retained for different purposes. For example, some personal data may be retained due to legal requirements even if they have been deleted for other purposes.

BeforeBuilding reviews the necessity of retaining your personal data on a regular basis, taking into consideration the applicable legal regulations. As a general rule, personal data are retained for the duration of our contractual relationship and no longer than necessary to submit or process any contractual claims. Email addresses on the mailing list are retained until the data subject requests their removal.

Personal data processed based on the consent of the data subject are deleted upon withdrawal of that consent. In cases where this is required under applicable legislation, such as tax and accounting legislation, the personal data are retained for the period required by law (e.g. accounting data 7 + current year). In this case, the data will only be used for the fulfilment of the relevant obligations.

In addition, we take appropriate and reasonable measures to ensure that personal data that are incompatible with the purposes for which they are processed, or that are outdated or inaccurate, are not retained. We undertake to correct or delete such data without undue delay.

11. What are my rights as a data subject?

You have the right to request access to your personal data, review your personal data stored in the databases of BeforeBuilding or its partner, request the correction or deletion of inaccurate, outdated, unnecessary or unlawful data, and to restrict the processing of your personal data.

If the processing is based on your consent, you have the right to withdraw or amend your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw your consent, please contact BeforeBuilding by sending an email to the address provided in clause 2 of the privacy policy. To unsubscribe from newsletters, you can click on the ‘Unsubscribe from future newsletters’ link at the bottom of the newsletter.

If you wish BeforeBuilding to terminate or restrict the processing of data necessary for the performance of the contract for intermediation service, this will unfortunately result in the termination of the intermediation service and will be considered a mutual termination of the contract by agreement between the parties.

You have the right to review the personal data you have provided to us, the processing of which is based on your consent, and to request its transfer to another controller.

If the conditions for exercising your rights are met, BeforeBuilding will fulfil your request received by email within one month of receipt. Where necessary and justified, BeforeBuilding may extend the time limit for resolving the request by two months, informing the data subject accordingly.

If BeforeBuilding has grounds for refusing to fulfil the request, BeforeBuilding sends a reasoned refusal decision within the time limit referred to in the preceding paragraph.

You have the right to contact the Estonian Data Protection Inspectorate and file a complaint if you suspect that we have processed your personal data improperly. For more information, visit https://www.aki.ee/en.

12. Amendments to the privacy policy

If we amend the privacy policy, we will publish the updated version on the website of BeforeBuilding with a reference to the effective date. In the event of significant changes, we may also notify you through other means, such as by email or by publishing a formal notice on the website. We encourage you to review the privacy policy periodically to stay informed about any changes.