Privacy Policy

1. Controller

The controller of your personal data is:

• Tehisintellekt OÜ (“we”, “Tehisintellekt”)
• Estonian business registry code: 16967299
• VAT number: EE102729140
• Registered address: Jalgpalli 1, 11312 Tallinn, Eesti
• Tartu office: Narva mnt 18, 51009 Tartu
• E-mail: info@tehisintellekt.ee
• Phone: +372 5647 4115
• Member of the board: Eneli Eljand

We have not appointed a Data Protection Officer, as the law does not require us to. For any data protection question, or to exercise your rights, write to info@tehisintellekt.ee.

2. What data we collect

We collect only what we need to provide the service, or what you have consented to. We obtain the data mainly from you.

We do not collect special categories of personal data (health, beliefs and similar) and we do not knowingly process data about people under 16. If a participant needs an accommodation, we use that information only to organise the course and delete it afterwards.

3. Purposes, legal bases and retention

Placing an order requires the customer’s name, e-mail and address, the payment details, and each participant’s name, e-mail and personal identification code — without them we cannot conclude the contract, issue an invoice or issue the confirmation. Subscribing to the newsletter and allowing analytics cookies is always optional and refusing has no effect on ordering a course.

4. Estonian personal identification code

We ask for an Estonian personal identification code for every participant, and it is required. The course completion confirmation is part of the service and it has to identify the participant unambiguously — without the code we can neither issue it nor register the participant. We use the code for nothing else.

Public courses are delivered in Estonian, and the order form validates the code (11 digits, a valid date of birth and a check digit) so that a typo cannot reach the confirmation. The validation only establishes that the code is well-formed — we do not query the population register or any other register to verify it. If you do not have an Estonian personal identification code, write to info@tehisintellekt.ee and we will arrange the registration separately.

• The code is stored encrypted in the database (AES-256-GCM) and is not shown in ordinary views.
• Access is limited to those of our staff whose job is issuing confirmations.
• The code is anonymised automatically 180 days after the course. After that even we cannot restore it.
• The code is not disclosed to third parties unless the law requires it.

5. Cookies

The website uses cookies. Necessary cookies are always in use, because the site does not work without them. Analytics and marketing cookies are used only with your prior consent, and you can withdraw that consent just as easily at any time.

A full list of the cookies used, their purpose and lifetime, and the button to change your consent, are on the cookie policy page.

6. Processors and recipients

We do not sell personal data. We use service providers who process data on our behalf and on our instructions, and we have data processing agreements with them.

When an on-site course is ordered, the venue address is sent to Google services to provide address suggestions and to calculate the trainer’s travel time and the travel cost. The address is not special category data for us, but please do not enter private personal remarks in the address field.

We may also disclose data to public authorities where the law requires it, and to our legal adviser or auditor where necessary to bring or defend a legal claim.

7. Transfers outside the European Economic Area

Some of the providers listed above are located outside the European Economic Area, or use sub-processors there, mainly in the United States. Such transfers rely on the European Commission’s standard contractual clauses and/or the EU–US Data Privacy Framework.

For more detail on the safeguards in place, write to us at info@tehisintellekt.ee.

8. AI tools used during training

During our courses we use publicly available AI tools (for example ChatGPT, Microsoft Copilot, Claude). Participants enter data into them themselves, and the providers of those tools are independent controllers in that respect — processing is governed by their own terms.

When practising during a course, please do not enter personal data, client data or trade secrets into AI tools unless your employer has clearly permitted it for that specific tool. The trainer reminds participants of this at the start and helps you work with sample data instead.

We do not use our customers’ or participants’ personal data to train AI models.

9. Direct marketing

We send marketing messages to private individuals only with prior consent. You can give consent at checkout or by subscribing to the newsletter, and you can withdraw it at any time using the link at the end of every marketing e-mail, or by writing to us.

We may send information about our courses to a business customer’s work contact on the basis of legitimate interest. Every such message contains a clear way to opt out.

E-mails relating to an order — order confirmation, invoice, payment reminder, the joining link and practical information — are not direct marketing and we send them even if you have opted out of marketing messages.

10. Your rights

In relation to your personal data you have the right to:

• access the data we process about you and receive a copy of it;
• rectify inaccurate or incomplete data;
• request erasure where there is no longer a basis for processing;
• restrict processing or object to processing based on legitimate interest, including direct marketing;
• withdraw consent — this does not affect the lawfulness of processing before withdrawal;
• receive the data in a portable format where processing is based on consent or a contract;
• lodge a complaint with the supervisory authority — see “Complaints”.

To exercise your rights, write to info@tehisintellekt.ee. We reply within one month. Where a request is complex we may extend that by up to two months and will tell you. Before releasing data we must be satisfied that the request comes from you.

Some data cannot be deleted before the statutory retention period ends — invoices, for example, must be kept for 7 years.

11. Security

• All communication with the website is encrypted (HTTPS/TLS).
• The personal identification code is encrypted in the database and access to it is restricted by role.
• Only named user accounts can access the admin environment, and only to the extent their work requires.
• We do not store card or bank details — they only pass through the payment provider’s environment.
• Our staff and trainers are bound by confidentiality obligations.

12. Automated decisions and profiling

We do not take decisions based solely on automated processing that would have legal consequences for you. The system calculates the course price and travel cost automatically, but that is the application of contract terms, not a decision about you.

Marketing cookies used with your consent allow advertising providers to show you targeted advertising elsewhere online. You can withdraw that consent at any time on the cookie policy page.

13. Complaints

If you believe we have processed your data unlawfully, please contact us first — we will try to explain and resolve the situation.

You always have the right to turn to the supervisory authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, info@aki.ee, +372 627 4135, aki.ee. You also have the right to go to court to protect your rights.

14. Changes to this policy

We update this policy when our services, our service providers or the law change. The date of the current version is shown at the top of this page. We notify newsletter subscribers by e-mail of significant changes.