Data Protection

Introduction

The Regia.ee platform is provided by Codester OÜ (registry code 16353798) to offer a transparent overview of companies registered in the Estonian Business Register. Our service is based on publicly available information and strictly follows the data protection rules of the European Union.

This document explains how we handle personal data related to corporate activities. Our processing is based on the General Data Protection Regulation (GDPR) and Estonian legislation.

What Data We Publish

Published data:

• Public data of company board members and owners (name, date of birth)
• Registry data from the Business Register
• Public economic indicators
• Business activities and contact details that are publicly available

Source of data:

All data displayed on the platform comes from public sources—primarily the Estonian Business Register and other official registers. We do not collect data directly from private individuals and do not use non-public information.

Timeliness:

The database is updated automatically every day. Changes in the Business Register are generally reflected on our platform within 48 hours.

Why We Publish Data

Main purposes:

• Transaction security – Helping businesses and individuals make informed decisions when choosing business partners
• Increased transparency – Supporting fair competition and a transparent business environment
• Public interest – Providing society with essential information about the economic environment
• Risk mitigation – Enabling assessment of potential business risks before entering into transactions

Your Rights

Under the GDPR you have the following rights:

• Right of access
  You have the right to know which of your data we process and how. You may request a copy of your data.
• Rectification
  If your data is inaccurate or out of date, you can request a correction. Please note that we can only amend data that does not originate directly from official registers.
• Erasure
  In certain cases, you may request the deletion of your data. This right is limited where retention is required by law.
• Restriction of processing
  You may request temporary suspension of processing, for example while disputed data is being verified.
• Object to processing
  You have the right to object to the processing of your data. We will balance your objections against the public interest.

Security and Protection

Measures in place:

• 256-bit SSL encryption for all connections
• Regular security audits and penetration testing
• Restricted access to sensitive systems
• Documented data processing procedures

Contact and Complaints

If you are not satisfied with our response to your data protection request, you have the right to file a complaint with the Estonian Data Protection Inspectorate.