Privacy Policy

1. General provisions

This privacy policy describes how Mugav Auto OÜ (hereinafter — data controller) collects, uses and protects the personal data of website users (hereinafter — data subject).

Data controller: Mugav Auto OÜ
Email: [email protected]

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Estonian law.

2. Data collection and processing

We collect personal data that you voluntarily provide when filling in contact forms. This data includes:

• first and last name;
• email address;
• phone number;
• vehicle details (make, model, year of manufacture, registration number);
• comments and any other information you include in the form.

AI booking assistant. Our website may offer a chat assistant for booking services. Through it we collect: your name, phone number, email address (optional), vehicle details, the selected visit date, and the text of your conversation with the assistant. This data is used solely to create and confirm your booking. Conversations with the assistant are retained for no longer than 30 days; the booking data itself is retained as client data.

Data is retained for no longer than 5 years from the date of receipt, unless a longer period is required by law or business necessity.

3. Cookies

Our website uses cookies. Cookies are small text files stored in your browser when you visit a website.

We use the following categories of cookies:

• Strictly necessary cookies — required for the website to function and cannot be disabled.
• Analytics cookies — help us understand how visitors use the website. All data is anonymous.
• Advertising cookies — used to show relevant ads and measure the effectiveness of campaigns.

On your first visit you can choose which cookie categories to accept. You can change your preferences at any time using the "Change cookie settings" button at the bottom of this page.

4. Legal basis for data processing

We process your personal data on the following legal bases:

• (a) your consent (Art. 6(1)(a) GDPR) — for example, when accepting analytics or advertising cookies;
• (b) performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR);
• (c) compliance with a legal obligation (Art. 6(1)(c) GDPR);
• (f) the legitimate interests of the data controller (Art. 6(1)(f) GDPR) — when processing data to improve services and prevent fraud.

5. Sharing data with third parties

We do not sell or transfer your personal data to third parties, except in the following cases:

• transfer to service providers (data processing, hosting, analytics) bound by a confidentiality agreement;
• transfer of the conversation text to AI/LLM providers operating the chat assistant; such processing may take place outside the EEA with safeguards required by the GDPR (standard contractual clauses);
• transfer required by law or competent public authorities.

Where data is transferred outside the European Economic Area, we ensure an adequate level of protection in accordance with GDPR requirements.

6. Your rights

Under applicable data protection law, you have the right to:

• receive information about which of your data we process;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• object to data processing or request its restriction;
• receive your data in a structured, machine-readable format (right to data portability);
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal);
• lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

To exercise your rights, please contact us at: [email protected].

7. Final provisions

We reserve the right to amend this privacy policy. The current version is always available on this page. By continuing to use the website after changes are made, you accept the updated policy.

For all questions regarding the processing of personal data, please contact: [email protected].