Privacy notice
Prism Hooldus OÜ · EestiJurist
1. Who processes the data
The controller is Prism Hooldus OÜ, registry code 16894703, Läänemere tee 62, 13914 Tallinn. Questions about data processing: info@prism.ee.
2. What data is needed
The contact form sends your name, phone number, e-mail, a description of the situation and the address of the page the request was sent from. The phone field is optional. A short description is enough for a first request; documents are agreed separately.
3. Purpose and legal basis
We use the data to reply, to assess the request and to prepare the agreed assignment. The basis is steps taken at your request before a contract and performance of the contract (GDPR Article 6(1)(b)). Legal obligations, including accounting, are performed under Article 6(1)(c).
4. Access and retention
Access is limited to the people who need the data to handle the request and, within their functions, to the hosting and e-mail providers. The retention period depends on the purpose of the request, the term of the contract, statutory accounting periods and the need to defend legal claims.
5. Your rights
You can ask for access to your data, its correction, erasure or restriction of processing, and, where the law provides, data portability and objection to processing. Send the request to info@prism.ee. A complaint can be filed with the Estonian Data Protection Inspectorate: aki.ee.
6. Website and external services
Sending the form does not subscribe you to a newsletter. Fonts load from Google Fonts: the browser connects to Google servers and sends the technical data of the connection. The WhatsApp link opens an external service governed by its own rules. Read the Terms of Service of the /abi/ assistant before using it.
7. AI document assistant (/abi/)
Data. We process your e-mail address, your interview answers and description, uploaded files, order and payment data, and a log of your consents (time and text version).
Legal bases. The interview and preparing the document: performance of a contract, GDPR Art. 6(1)(b). Special-category data (for example health) that you write in your description: explicit consent, Art. 9(2)(a); you can withdraw consent at any time (Art. 7(3)). Accounting: legal obligation, Art. 6(1)(c); source documents and ledgers are kept seven years from the end of the financial year (Accounting Act § 12 (1) and (2)). Error and fraud detection logs: legitimate interest, Art. 6(1)(f).
Recipients. Google LLC (Gemini) and Anthropic (Claude) analyse your text and files and help prepare the document. Stripe Payments Europe Ltd (Ireland) processes payments (under its own terms partly as processor and partly as controller for fraud and anti-money-laundering purposes). We send e-mail from our own server in Estonia; there is no separate mail provider. If a conversation is handed off for manual handling, the case summary, your contact details and the transcript reach our staff as a Telegram notice; Telegram Messenger Inc. keeps EEA users' data in data centres in the Netherlands. The server is in Estonia, hosted by FastVPS (OÜ hOsting.One, Jõhvi).
Transfers outside the EEA. Google LLC and Stripe, LLC are certified under the EU-U.S. Data Privacy Framework, covered by the European Commission adequacy decision (EU) 2023/1795 (GDPR Art. 45). Anthropic, according to its privacy policy, relies on the European Commission's standard contractual clauses for transfers to the USA (Art. 46(2)(c)); Telegram uses the same mechanism for transfers within its group.
Retention. 90 days after the case starts we delete the interview, description, files and the prepared document and strip the case of anything that identifies you. If the document was paid for, the case is kept until 90 days after payment. The order and payment record (e-mail address, amount, time of consent and terms version) is kept for accounting for seven years from the end of the financial year and deleted after that. On request we delete data earlier unless the law requires us to keep it.
Your rights. You can ask for access, correction, erasure, restriction and portability, and you can object to processing. The system does not make any decision with legal effect about you on its own: you decide whether to use the document. You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) [S5, Art. 77(1)].
Contact. info@prism.ee, phone +372 5368 4587, Prism Hooldus OÜ, Läänemere tee 62, 13914 Tallinn.