Privacy policy

REdata OÜ, registry code 16995120, Luise tn 2-1, 10142 Tallinn, Estonia. Email: info@redata.ee.

REdata is a data-driven real estate valuation platform. It is used by professional appraisers, banks and other companies in the financial, real estate and insurance sectors, and by other persons where needed.

Our role depends on whose data is concerned.

The terms for processing data in valuations are set out in the service agreement between REdata and the client.

To train the valuation models we use market data from the Estonian Land and Spatial Board and property quality data entered by appraisers. We do not use names, personal identification codes or contact details to train the model. We do not store the personal identification codes of platform users.

• From you: contact form, email, user account.
• From your employer: the client’s administrator sends you an invitation.
• From national registers: the building register, the address data system and the cadastre via X-Road, and the land register via its official query interface. A land register query is made when the appraiser opens the property.
• From the Estonian Land and Spatial Board database minu.kataster.ee.
• From the appraiser: data of the person ordering the valuation and photos of the property.

The statistics-based valuation model runs on our own server. The model receives only property data, such as floor area, year of construction, location and building data. The model does not receive names or personal identification codes.

The model’s valuation is a support tool. REdata does not make automated decisions about you that have legal or similarly significant effects (GDPR Art. 22). If a client, such as a bank, uses the valuation in its own decision, the client is responsible for that decision.

The following service providers process data on our behalf. They may use the data only on our instructions and must keep it confidential.

We send national registers only the property identifier or address needed for the query. We send map and routing services (Estonian Land and Spatial Board map layers, OpenStreetMap, openrouteservice) only the property’s location. Where required by law, we share data with the competent authorities.

We normally notify clients 30 days before adding a new service provider.

We store and process platform data in the European Union. The server and backups are located in Finland. The exceptions are GitHub (backup transfer) and Google Analytics. In these cases we transfer data on the basis of the safeguards in Chapter V of the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Deleted data disappears from backups when the backup retention period ends.

You have the right to:

• access your data and receive a copy of it;
• request the correction of inaccurate data;
• request the deletion of your data;
• restrict the processing of your data;
• object to processing based on legitimate interest;
• withdraw your consent at any time;
• receive the data you have provided in a machine-readable format.

To exercise your rights, write to info@redata.ee. We reply within one month.

If your data is in a valuation prepared by our client, please contact the company that carried out the valuation first. If you contact us, we will forward the request to the client and help them respond.

If you believe we are violating your rights, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

On the website we use necessary cookies, for example to remember your language choice. We use analytics cookies (Google Analytics) only with your consent. You can change your consent via the “Cookie settings” link in the page footer.

On the platform we use a session cookie to keep you logged in. Page scripts cannot read this cookie. We use web analytics on the platform only with the user’s consent.

• The server and backups are located in the European Union.
• All connections are encrypted (HTTPS).
• We store passwords as one-way hashes.
• Users see only their own company’s data. A valuation is visible only to the appraiser who prepared it. Market data is visible only to users whose legitimate interest the client has documented.
• Connections to national registers go through an X-Road security server.
• Repeated failed logins are blocked temporarily.
• The database is backed up every night.
• Development and administration partners are bound by a confidentiality obligation.

For data protection questions, write to info@redata.ee with the subject “Data protection”.

We update this policy when the service or the law changes. We announce significant changes on the website and notify platform users by email. The current version is available at redata.ee/privaatsuspoliitika.