Privacy Policy

1. Data controller

The data controller is Hellart Eesti OÜ, registration code 14108468, address: Müürivahe tn 29-1, Kesklinna linnaosa, 10140 Tallinn, Harju maakond, Estonia.

For any questions about the processing of personal data, write to hello@gellart.estate.

2. Who is a client

A client is a natural person who has provided us with their data (or whose data has been provided to us or collected by us) and whose data we process on the grounds and for the purposes set out here.

3. What data we collect and why

We obtain personal data in the following ways:

• the client provides the data themselves (name, phone, email, preferred language and residence preferences) — via the website form, by phone, email or WhatsApp;
• the data is provided by a third party (for example, a broker);
• through cookies when you use the website.

Purposes of processing:

• responding to your registration of interest and matching a suitable residence;
• sending the requested materials (price list, floor plans, presentation);
• service-quality feedback and sending news and offers (with your consent);
• compiling anonymised statistics.

4. Legal bases for processing (GDPR Art. 6)

• performance of a contract — steps taken at the client's request prior to entering into a transaction, and the conclusion and performance of the contract;
• legal obligation — processing necessary to comply with our obligations under the law;
• legitimate interest — contacting the client, preparing and defending legal claims, service-quality feedback;
• consent — for example, direct-marketing communications; consent may be withdrawn at any time.

5. Retention period

• registered interest in a property — 24 months from the last contact;
• where a contract is concluded — in line with the limitation periods under Estonian law (up to 10 years for contractual claims; 7 years for accounting documents);
• data obtained through cookies — in line with the cookie policy.

After these periods the data is deleted, unless the law requires otherwise.

6. Security measures

We apply appropriate technical and organisational safeguards (including data encryption, two-factor authentication and staff training). Only authorised persons have access to modify and process the data.

7. Who we share data with

Request data is transferred to the developer Agalarov Development (the Sea Breeze project, Azerbaijan) in order to process your enquiry about purchasing property. This constitutes a transfer of personal data outside the European Economic Area (to Azerbaijan).

This transfer is carried out on the basis of your consent and in order to fulfil your request (GDPR Art. 49(1)(a) and (b)), limited to the minimum necessary and with reasonable protective measures.

In addition, data may be processed by authorised processors (under data-processing agreements): our hosting provider, the Telegram notification service, and analytics services (Google, Yandex).

8. Your rights

• to know what data is processed and to receive a copy of it;
• to correct inaccurate data or request its deletion;
• to restrict processing and to object to it;
• to object to processing for direct-marketing purposes;
• to withdraw consent at any time — without affecting the lawfulness of processing carried out before the withdrawal;
• to data portability.

To exercise your rights, write to hello@gellart.estate.

9. Right to lodge a complaint

If you believe your rights have been infringed, you have the right to lodge a complaint with the Estonian supervisory authority — Andmekaitse Inspektsioon (the Estonian Data Protection Inspectorate), aki.ee.

10. Changes to this policy

We reserve the right to amend this policy. The current version is always available on the website.

Last updated: 2026-07-31