Privacy policy
This page explains what data the website lenks.ee collects, what we use it for and what rights you have. The policy applies to the website lenks.ee and its visitors.
Data controller
The controller of your data is Kindel Juht OÜ (registry code 17351152), Soldina tn 19-41, 21005 Narva, Estonia. Email info@lenks.ee, phone +372 55 44 007. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
What data we collect
- Registration form: name, email address, phone number, the chosen category, your comment and a promo code if you enter one.
- Gift card order: the buyer's name, email address and phone number, optionally the company name, registry code and a note, the chosen gift and card language, and the recipient's name if you write it on the card. With the order we also store the IP address, browser details and where you came to the page from (for example Google search or an ad).
- Direct contact: when you call or write by email, WhatsApp or Messenger, we receive your contact details and the content of your message. WhatsApp and Messenger are services of Meta Platforms Ireland Ltd., which also process data under their own terms.
- Automatically: IP address, browser and device type, time of the visit and pages viewed. These reach the hosting provider's server logs and, with your consent, Google Analytics.
Why and on what basis we use data
- Data sent through the form or by direct contact is used to contact you, answer your question and prepare the training contract. When you send the form we also email you a confirmation. Basis: steps prior to a contract at your request (GDPR Art. 6(1)(b)).
- Gift card order data is used to send the invoice, to prepare the card and send it to you, and to check the card when it is used. Basis: the contract (GDPR Art. 6(1)(b)) and our accounting obligation (GDPR Art. 6(1)(c)). The recipient's name is used only on the card and in the order, and the IP address, browser details and the source of your visit are used for order statistics and to prevent misuse. Basis: our legitimate interest (GDPR Art. 6(1)(f)).
- Statistics and ad measurement (Google Analytics, Google Ads) are used only with your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time via the “Cookie settings” link in the footer.
- Server logs and the form's spam protection are used to keep the website secure. Basis: our legitimate interest (GDPR Art. 6(1)(f)).
Cookies
| Cookie | Purpose | Lifetime |
|---|---|---|
| PHPSESSID | Necessary: session cookie for the website to work | until the browser is closed |
| kr_consent | Necessary: stores your cookie choice | 6 months |
| theme (browser storage) | Functional: light or dark design choice | until deleted |
| _ga, _ga_* | Statistics: Google Analytics 4 tells visitors and visits apart | 2 years |
| _gcl_au, _gcl_aw | Advertising: Google Ads measures inquiries that came from an ad | 3 months |
Statistics and advertising cookies are set only after you press “Accept” in the cookie notice. If you choose “Necessary only”, Google stores no cookies on your device and receives only anonymous aggregate signals (Google Consent Mode). You can also delete cookies in your browser settings.
Who we share data with
- Google Ireland Limited – Google Analytics and Google Ads, only with your consent. Google's privacy terms: policies.google.com/privacy. The profile pictures in our Google reviews are loaded from Google's servers, so Google receives your IP address when the page is viewed.
- Hosting and email providers that process data on our behalf and on our instructions.
- Public authorities where the law requires it.
We do not sell your data or use it for other purposes. After a training contract is signed, the processing of data, including the transfer of the student's data to the Transport Administration (Transpordiamet), is governed by the training contract.
How long we keep data
- Inquiries sent through the form or by direct contact are kept until the matter is resolved, but no longer than one year if no training contract is signed.
- When a training contract is signed, we keep the data for the term of the contract and afterwards for the period required by the Accounting Act (seven years).
- Gift card order data is kept while the card is valid and afterwards for the period required by the Accounting Act (seven years). The IP address, browser details and the source of your visit are removed from the order after one year.
- Server logs are kept by the hosting provider for a short time for security purposes.
- Cookie lifetimes are listed in the table above.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability and to withdraw consent at any time. To do so, write to info@lenks.ee. We reply within one month at the latest. If you believe your rights have been violated, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).
Security
The website runs over an encrypted connection (HTTPS). Only the school staff who need it have access to inquiries. The form is protected by spam filtering that stores no additional data about you. On the gift card order form we limit the number of orders: for this we keep a hash derived from the IP address for one day, not the address itself.
Minors
A student under 18 is registered for the course, and the training contract is signed, by their legal representative.
Links to other websites
Our website links to other sites (for example Google, WhatsApp, Facebook, Instagram, TikTok, Waze). Their own privacy terms apply to them and we are not responsible for them.
Changes
We update this policy when needed and change the date below. In force since 24.10.2026; gift card orders added on 26.10.2026.