Legal
Privacy Policy
MUSTAND — vajab enne avalikustamist juristi ülevaatust ja kinnitust. Pole veel lõplik juriidiliselt siduv tekst.
This Privacy Policy explains what personal data the Scoop platform (Scoop.ee) collects, why, and how it processes it, in line with the EU General Data Protection Regulation (GDPR). The data controller is Equity Europe OÜ, Laki tn 15, Mustamäe linnaosa, 12915 Tallinn, Harju maakond, registry code 16543895, contact: info@scoop.ee.
1. What data we collect
Account data: name, phone, email, account type (private/company), and for companies also the company name, address, registry code and VAT number, profile photo/logo, preferred language and contact method.
Listing data: content of posted listings, photos, contract documents, location (including map position), price information.
Communication data: messages and offers sent via the platform, expressions of interest, listing reports.
Payment data: payment status, amount, invoice — we do not store your card details ourselves; these are processed by Stripe.
Usage data: login times, viewed/saved listings, device and browser information, data collected via cookies (see the Cookie Policy).
2. Legal basis for processing
Creating and managing an account and listings — for the performance of a contract (GDPR Art. 6(1)(b)).
Processing payments and issuing invoices — for compliance with a legal obligation (accounting) and performance of a contract.
Ensuring security and preventing abuse (e.g. detecting duplicate accounts) — our legitimate interest (Art. 6(1)(f)).
Cookies that are not strictly necessary — your consent (Art. 6(1)(a)), which you may withdraw at any time.
3. Who we share data with
Stripe (payment service) — to process payments.
Supabase (database and authentication service) — for the technical hosting of the platform.
Google (if you sign in with Google) — for authentication, subject to Google's own privacy terms.
Other platform users — contact details you publish on a listing are visible to interested parties according to your own chosen contact preferences.
We do not sell data to third parties for marketing purposes.
4. International data transfers
As the platform is used in several countries (including outside the EU), data may move across borders via the infrastructure of our service providers (Stripe, Supabase). Such transfers take place under GDPR-compliant safeguards (e.g. the European Commission's standard contractual clauses).
5. Data retention
We retain account and listing data for as long as the account is active. Deleted listing content is removed from the platform, but the total count of listings posted (not the content) is kept in order to track the free-listing rule.
We retain payment and invoicing data for the mandatory period required by accounting law, even after account deletion.
6. Your rights
You have the right to access your data, correct it, have it erased ("right to be forgotten"), restrict its processing, object to processing, and receive your data in a machine-readable format (data portability).
In your account settings (Dashboard → Profile) you can download your own data (JSON export) and permanently delete your account along with its data. For other requests, write to info@scoop.ee.
If you believe we are not complying with GDPR requirements, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or the relevant supervisory authority in your country of residence.
7. Security
We use technical and organisational measures (encrypted data transfer, access restrictions, authentication) to protect your data. No system is 100% secure — please use a strong password and do not share your login details.
8. Cookies
See our separate Cookie Policy for details.
9. Contact
For questions, write to info@scoop.ee.