Controller: Creative Solutions and Consultations OÜ, Õismäe tee 141, 13518 Tallinn, Estonia, info@creasolacon.ee.
Data we process: account details (name, email, login data), profile and listing content, messages and quotes, booking and payment records (card data is handled by Stripe, not us), provider verification and payout data (handled by Stripe), reviews, dispute records, and technical data (IP address, device and log data).
Purposes and legal bases (Art. 6 GDPR): providing the marketplace, bookings, chat and payments — performance of a contract; fraud prevention, security and dispute handling — legitimate interests; accounting and tax records — legal obligation; optional marketing emails — consent, which you can withdraw at any time.
Recipients: the other party to your booking; Stripe Payments Europe (payments and payouts); hosting, database and email service providers acting as our processors; authorities where required by law. Some processors may transfer data outside the EEA, in which case we rely on adequacy decisions or Standard Contractual Clauses.
Retention: account data while your account is active; booking and payment records for 7 years as required by the Estonian Accounting Act; messages and dispute records for up to 3 years after the booking to handle claims; technical logs for up to 12 months.
Your rights: access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent. Contact info@creasolacon.ee; we respond within one month. You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee, info@aki.ee) or your local supervisory authority.
We do not sell personal data and do not make decisions with legal effects based solely on automated processing.