Privaatsuspoliitika

1. Vastutav tootleja

Hangete Radar (edaspidi "meie") on vastutav tootleja Teie isikuandmete tootlemisel. Kui Teil on kusimusi, voite meiega uhendust votta aadressil privacy@eesti-hanked.ee.

2. Milliseid andmeid me kogume

• Konto andmed: e-posti aadress, nimi ja ettevotte nimi, mida toodeldakse Clerki autentimissusteem kaudu.
• Kasutusandmed: teenuse kasutamisega seotud logid, seadme ja brauseri info.
• Hanke andmed: avalikult kattesaadavad Eesti riigihangete andmed, mida me agregeerime ja tootleme.

3. Andmete tootlemise eesmark

• Teenuse osutamine ja konto haldamine
• AI-pohised kokkuvotted (OpenAI, Google, Anthropic teenuste abil) avaliku hankeinfo pohjal
• Teavituste saatmine e-posti teel (Resend teenuse kaudu)
• Teenuse parandamine ja statistiline analuus

4. Andmete jagamine

Me ei muugi ega jaga Teie isikuandmeid kolmandate osapooltega, valjaaarvatud:

• Clerk— autentimine ja sessioonihaldus
• Convex— andmebaas (USA-s asuv)
• OpenAI, Google, Anthropic— AI-kokkuvotete genereerimine
• Resend— e-posti saatmine

5. Andmete saalitamine ja turvalisus

Teie andmed salvestatakse Convex platvormil (USA) ja toodeldakse EL-is. Andmeedastus valjaspoole EL-i toimub vastavalt GDPR-i noudele ja standardsete lepingutingimuste alusel. Me kasutame toostusharu standardeid andmete kaitsmiseks.

6. Teie oigused

GDPR alusel on Teil oigus:

• Tutvuda oma isikuandmetega
• Nouda andmete parandamist voi kustutamist
• Piirata tootlemist voi esitada vastuvaie
• Nouda andmete ulekandmist
• Esitada kaebus andmekaitse inspektsioonile

7. Kupsised

Me kasutame kupsiseid autentimise sessioonide haldamiseks. Taielik teave on kattesaadav meie kupsiste poliitikas.

1. Data Controller

Hangete Radar ("we") is the data controller for your personal data. Contact us at privacy@eesti-hanked.ee.

2. Data We Collect

• Account data: email, name, company name (via Clerk authentication).
• Usage data: service logs, device and browser information.
• Procurement data: publicly available Estonian procurement data that we aggregate and process.

3. Purpose of Processing

• Providing the service and account management
• AI-powered summaries using OpenAI, Google, and Anthropic services
• Sending notifications via email (Resend)
• Service improvement and statistical analysis

4. Data Sharing

We do not sell or share your personal data with third parties, except for the following service providers:

• Clerk— authentication and session management
• Convex— database (US-based)
• OpenAI, Google, Anthropic— AI summary generation
• Resend— email delivery

5. Data Transfers & Security

Your data is stored on Convex (US) and processed in the EU. Cross-border transfers comply with GDPR requirements under Standard Contractual Clauses. We use industry-standard measures to protect your data.

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectification or erasure
• Restriction of processing or objection
• Data portability
• Lodge a complaint with a supervisory authority

7. Cookies

We use cookies for authentication sessions. Full details are available in our Cookie Policy.