Privacy Policy

1. Controller and contact

RERA PropTech OÜ (registry number 17251982) is the controller for the personal data described in this policy. Its registered address is Harju maakond, Tallinn, Kristiine linnaosa, Kuldnoka tn 22, 10619, Estonia. You can contact us about privacy or exercise your rights at it@rera.cy.

2. Information we collect

When you submit an access request, we collect the information you provide: name, email address, role, team size, selected plan, billing preference, project website and your confirmation that you have read this policy and requested a registration email. We also process limited technical information needed to operate and protect the form, including request metadata and the anti-bot field. We do not store the anti-bot field.

The name, email address, role, team size and confirmation are required to submit an access request. The project website, selected plan and billing preference are optional. If you do not provide the required information, we cannot review or respond to your request.

3. Why we use it and our legal bases

We use access-request information to review your request, contact you about registration and respond to related questions. Our legal basis is Article 6(1)(b) GDPR: taking steps at your request before entering into a contract. We process technical information and protect the form from misuse under Article 6(1)(f) GDPR, based on our legitimate interests in operating a secure and reliable website. If you allow analytics, we process the related data under Article 6(1)(a) GDPR, based on your consent. We may also retain or disclose information where this is necessary to comply with a legal obligation or establish, exercise or defend legal claims.

4. Cookies and analytics

With your consent, Peerka uses Google Analytics 4 to understand how visitors use the site. Google Analytics may receive page views, browser and device information, online identifiers, approximate location derived from IP address and referral information. We do not use Google Analytics for advertising, ad personalisation or Google Signals. You can allow, refuse or withdraw analytics consent at any time through “Cookie preferences” in the footer. See our Cookie Policy for the browser technologies used by the site.

5. Sharing and retention

We do not sell personal data. We use Cloudflare to host, secure and operate the website and its access-request database, and Google LLC to provide Google Analytics when you consent. These providers process data for their respective services under applicable contractual safeguards. We retain access-request data for up to 12 months from submission, then delete it, unless a longer period is necessary to comply with a legal obligation or establish, exercise or defend legal claims. Google Analytics event-level data is retained for two months. Technical security records are retained for no longer than 30 days where we control the retention period.

6. International transfers

Where personal data is transferred outside the European Economic Area, we use an adequacy decision or another appropriate safeguard under applicable data-protection law, such as the European Commission’s Standard Contractual Clauses. You may request information about the applicable safeguard by emailing it@rera.cy.

7. Your rights

Depending on applicable law, you may request access to, correction or deletion of your personal data; restriction of processing; or portability of data you provided. You may also object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. To make a request, email it@rera.cy. You may also lodge a complaint with your local data-protection authority, including the Estonian Data Protection Inspectorate.

8. Automated decisions

Access requests are reviewed by people. We do not make decisions about your request solely by automated means that produce legal or similarly significant effects.

9. Changes

We may update this policy when our practices or legal obligations change. The “Last updated” date shows when it was most recently revised.