Privacy Policy

1. Data Controller

The data controller responsible for your personal data is [Company Legal Name], [Registered Address], [Country] (registration/VAT number: [Registration Number]).

For any question about this Policy or about how we handle your personal data, you can contact us at privacy@estimo.pro or by post at the address above. Where applicable, our Data Protection Officer can be reached at [DPO Contact Email].

2. Data We Collect

We collect the following categories of personal data:

• Account data: your name, email address, preferred username, profile picture, and a unique identifier issued by our identity provider when you sign in.
• Job and quote content: job descriptions, budgets, deadlines, quotes, and messages you exchange with other users through the platform.
• Location data: the precise geographic coordinates you place on the map, or share via your browser's location feature, when posting or browsing a job, used to match jobs with nearby professionals.
• Reputation data: ratings associated with your account.
• Technical data: IP address and basic request metadata collected automatically by our hosting and map-tile providers as an inherent part of serving web pages and map tiles.
• Cookie data: see our Cookie Policy for full details.

3. How We Use Your Data and Our Legal Basis (Art. 6 GDPR)

We only process personal data where we have a valid legal basis to do so under Article 6 GDPR:

• To create and manage your account and authenticate you when you sign in — performance of a contract (Art. 6(1)(b)).
• To publish your job postings and quotes and enable messaging between users — performance of a contract (Art. 6(1)(b)).
• To show your job's location to nearby professionals on the map — performance of a contract (Art. 6(1)(b)) and, for precise geolocation, your consent (Art. 6(1)(a)).
• To maintain platform safety, prevent fraud and abuse, and allow administrators and moderators to review reported content — legitimate interest (Art. 6(1)(f)), balanced against your rights.
• To comply with legal obligations, such as responding to lawful requests from authorities or meeting tax and accounting obligations — legal obligation (Art. 6(1)(c)).
• To remember your language preference and keep you signed in — necessary for the service we provide you (Art. 6(1)(b)/(f)); see our Cookie Policy.
• To operate optional analytics, if and when enabled — your consent (Art. 6(1)(a)), given through the cookie consent banner.

4. How Long We Keep Your Data

• We keep account data for as long as your account is active, and for a further [retention period] after account deletion to handle disputes, comply with legal obligations, and prevent abuse.
• Job postings, quotes, and messages are kept for [retention period] after the related job is closed or deleted, unless a longer period is required to resolve a dispute or comply with law.
• Consent records for cookies are kept for the lifetime of the consent cookie (see Cookie Policy) so we can demonstrate compliance with consent requirements.
• We delete or irreversibly anonymize personal data once it is no longer needed for the purposes above.

5. Who We Share Your Data With

We share personal data only with the following categories of recipients, under appropriate data processing agreements where required:

• Authentik (identity provider): operated on our behalf at [Authentik hosting location/company], processes your login, email, name, and profile picture to authenticate you and manage sign-in sessions.
• [Database Hosting Provider Name] (database hosting): stores job, quote, message, and profile data in our database on our behalf.
• OpenStreetMap tile servers (openstreetmap.org and the OpenStreetMap Foundation): when a page displays a map, your browser requests map tiles directly from OpenStreetMap's infrastructure, which as a result receives your IP address and basic request information as part of delivering the map tiles. See OpenStreetMap's own privacy policy at osmfoundation.org/wiki/Privacy_Policy.
• Google (potential federated sign-in): if and when we enable “Sign in with Google” as an additional login option, choosing that option will share the data Google discloses to us — name, email, profile picture — for authentication purposes. This option is not yet active.
• Administrators and moderators: designated Estimo Pro staff with an administrative or moderation role can access account and content data as needed to operate and moderate the platform; internal access is restricted to what each role needs.
• Public authorities: we may disclose personal data where required by law.
• We do not sell your personal data and we do not share it with advertisers.

6. International Data Transfers

[Company Legal Name] is established in [Country], and our infrastructure is hosted in [Hosting Region, e.g. the European Economic Area]. If any recipient listed above processes personal data outside the European Economic Area, we ensure an adequate level of protection through mechanisms recognized under GDPR, such as the European Commission's Standard Contractual Clauses, an adequacy decision, or another valid transfer mechanism. You can request further information about these safeguards by contacting privacy@estimo.pro.

7. Your Rights (Art. 12–22 GDPR)

Subject to the conditions set out in the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15).
• Request rectification of inaccurate or incomplete data (Art. 16).
• Request erasure of your data, the “right to be forgotten” (Art. 17).
• Request restriction of processing in certain circumstances (Art. 18).
• Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller (Art. 20).
• Object to processing based on legitimate interest, including profiling (Art. 21).
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal, including changing your cookie preferences at any time (Art. 7(3)).
• Not be subject to a decision based solely on automated processing that produces legal effects concerning you (Art. 22); Estimo Pro does not currently use automated decision-making of this kind.
• Lodge a complaint with your national data protection supervisory authority responsible for your habitual residence, place of work, or place of the alleged infringement — for example, the Garante per la protezione dei dati personali in Italy (garanteprivacy.it) or the Agencia Española de Protección de Datos in Spain (aepd.es).

8. Exercising Your Rights

To exercise any of the rights listed above, contact us at privacy@estimo.pro. We will respond within one month of your request, as required by Art. 12(3) GDPR, and may ask you to verify your identity before acting on the request.

9. Cookies

Estimo Pro uses a small number of cookies to keep you signed in, remember your language, and remember your cookie preferences. Every cookie we use, its purpose, and its duration are listed in our dedicated Cookie Policy, and you can change your preferences at any time using the “Manage Cookie Preferences” link in the site footer.

Cookie Policy

10. Children's Privacy

Estimo Pro is intended for users who are at least 18 years old, since using it involves entering into paid service agreements with local professionals. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@estimo.pro so we can delete it.

11. Security

We apply technical and organizational measures appropriate to the risk, including encrypted connections (HTTPS/TLS), authentication through our OpenID Connect identity provider, and role-based access controls that limit administrative access to personal data to staff who need it to perform their duties. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or in applicable law. We will post the updated version on this page with a new “Last updated” date, and where changes are material, we will provide additional notice, such as a banner on the site or an email, before they take effect.

13. Contact

[Company Legal Name]

[Registered Address]

Email: privacy@estimo.pro

Data Protection Officer (if appointed): [DPO Name / Contact]