Last updated: 10 August 2026
1. Data controller
The data controller for sandstrom.ee is Sandshine OÜ, registry code 16823637, Kärneri 6/1, Tallinn 13521, Estonia. For data-protection matters: aleksandra@sandstrom.ee.
2. Scope
This policy applies to website visitors, people contacting us through forms, e-mail, messaging services or consultation bookings, and clients or other transaction participants where data are processed for an agreed service.
3. Data we may process
- name, e-mail address, telephone number and contact preference;
- the content of enquiries and requests;
- property information voluntarily provided, including location, address, listing link, characteristics, price, photos or documents;
- information needed for a proposal, consultation, contract or transaction support;
- technical data, such as IP address, device and browser information, language, cookies, security logs and usage statistics.
4. Sources and purposes
We normally receive data from you. For real-estate services, data may also come from your representative, another transaction participant, a client, public registers, listings or other lawful sources where necessary for the task. We use data to respond to requests, arrange and provide services, support transactions, meet legal, accounting and tax duties, secure the website, and improve it through analytics with your consent.
5. Legal bases
Depending on the situation, processing is based on steps requested before a contract, performance of a contract, legal obligations, legitimate interests or consent. We do not use data for automated decisions producing legal or similarly significant effects.
6. Anonymous Q&A
We publish a question or answer only with separate consent. Before publication, we remove or alter names, addresses, property numbers, contact details, exact amounts and other identifying details. Consent can be withdrawn by e-mail.
7. Recipients and transfers
We do not sell personal data or disclose it to third parties for their own advertising. Access is limited to authorised Sandshine OÜ personnel, website hosting, support, e-mail and storage providers, Calendly for booking, and professionals involved in an agreed task, such as a notary, lawyer, valuer, bank, accountant, construction expert or building manager. We may also disclose data where required by law.
Some providers may process data outside the EEA. In that case, we use legally recognised transfer safeguards; information about them is available on request.
8. Cookies and external services
The website uses necessary technical cookies. Analytics cookies are used only after consent. Calendly, YouTube and Google Maps may process technical data and use cookies under their own privacy notices. Cookie preferences can be changed through the footer link.
9. Retention
- enquiries and requests without a contract: up to 24 months after the last substantive contact;
- consultation booking data: up to 24 months, unless longer retention is needed for a contract or legal claims;
- contracts, invoices, payments and accounting records: at least 7 years or longer where required by law;
- anonymous Q&A: until consent is withdrawn or content is no longer relevant.
10. Your rights
Where provided by law, you may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interests, or withdraw consent. Contact aleksandra@sandstrom.ee. We normally reply within one month and may request proof of identity. You may lodge a complaint with Andmekaitse Inspektsioon.
11. Security and updates
We use reasonable technical and organisational safeguards, although internet transmission and electronic storage cannot guarantee absolute security. We may update this policy when the website, services, processing practices or legal requirements change.