Privacy Policy

Last updated: 22 August 2026

This Privacy Policy explains how METLO ENGINEERING OÜ collects, uses, stores and protects personal data when you visit our website, contact us or otherwise interact with us through the website.

We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Who we are

The data controller responsible for the processing of personal data through this website is:

METLO ENGINEERING OÜ
Uus tn 26
Kadrina alevik, Kadrina vald
Lääne-Viru maakond 45201
Estonia

Website: https://metlo-infra.com
Email: info@metlo-infra.com
Phone: +372 55558928

In this Privacy Policy, “METLO”, “we”, “us” and “our” refer to METLO ENGINEERING OÜ.

2. Personal data we collect

We collect only personal data that is necessary for operating our website, communicating with potential and existing clients, providing our services and meeting our legal obligations.

Depending on how you interact with us, we may process the following categories of personal data.

Information you provide to us

When you contact us through our website, by email or by other means, you may provide information such as:

your name;
email address;
telephone number;
company or organisation;
country;
information about your project, enquiry or requested services;
any other information you choose to include in your message.

Please do not provide sensitive or unnecessary personal information through our contact form.

Technical and website usage data

When you access our website, certain technical information may be processed automatically, including:

IP address;
browser type and version;
device and operating system information;
date and time of access;
pages visited;
referring website or source;
technical logs and security-related information;
cookie and consent preferences.

Some of this information is necessary for the technical operation, security and reliability of the website.

Analytics data

With your consent, we use Google Analytics 4 to understand how visitors use our website.

Analytics information may include:

pages viewed;
approximate geographic location;
device and browser information;
traffic source;
session and interaction information;
events performed on the website.

We use this information to understand website performance, identify useful content and improve the website and our services.

Google Analytics is not intended to be used by us to directly identify individual website visitors.

3. How we use your personal data

We may use personal data for the following purposes:

responding to enquiries and requests;
preparing proposals, quotations or other pre-contractual communications;
communicating with potential and existing clients;
providing and managing our services;
operating and maintaining the website;
protecting the website against abuse, fraud and security threats;
analysing website performance where you have given consent;
improving our website, content and user experience;
maintaining business records;
establishing, exercising or defending legal claims;
complying with applicable legal and regulatory obligations.

We do not use personal data collected through this website for unrelated purposes without an appropriate legal basis.

4. Legal bases for processing

Under the GDPR, we rely on different legal bases depending on the purpose of the processing.

Steps prior to entering into a contract and performance of a contract

When you contact us regarding our services, we may process the information necessary to respond to your request, prepare a proposal and take steps towards entering into a contract.

Where you become a client, we may process personal data where necessary to perform our contractual obligations.

Legitimate interests

We may process personal data where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

responding to business enquiries;
maintaining professional business communications;
operating and improving our website;
protecting our systems and website;
preventing misuse and fraud;
maintaining appropriate business records;
protecting our legal rights.

Consent

We rely on your consent when using non-essential analytics technologies such as Google Analytics.

You may withdraw your consent at any time through the cookie preferences available on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal obligations

We may process and retain personal data where required to comply with accounting, tax, regulatory or other legal obligations applicable to us.

5. Contact forms and business enquiries

When you submit an enquiry through our website, we process the information you provide for the purpose of responding to you and handling your request.

Your enquiry may be delivered to and stored within our business email systems.

If your enquiry develops into a client relationship, the relevant correspondence may become part of our business or contractual records.

Submitting a contact form does not automatically subscribe you to marketing communications.

We do not sell information submitted through our contact forms.

6. Cookies and consent management

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function correctly. These may be used without consent where permitted by applicable law.

Other cookies, including analytics cookies, are used only where the required consent has been provided.

We use Complianz to manage cookie preferences and record the consent choices made through the website.

You can:

accept optional cookies;
reject optional cookies;
manage individual cookie categories;
change or withdraw your preferences later.

For detailed information about the cookies and technologies used on this website, please refer to our Cookie Policy.

7. Google Analytics

We use Google Analytics 4, a website analytics service provided by Google, to measure and understand the use of our website.

Google Analytics is activated for analytics purposes only after the required consent has been provided through our cookie consent system.

Google Analytics may process information such as:

website interactions;
pages visited;
session information;
device and browser characteristics;
approximate geographical information;
traffic acquisition information;
cookie or device identifiers.

Google may process technical information necessary to provide and secure the Analytics service.

We configure our analytics and consent settings with the aim of minimising unnecessary collection of personal data.

You can prevent analytics cookies from being used by rejecting statistics cookies or changing your cookie preferences on the website.

8. Who we share personal data with

We do not sell or rent your personal data.

Where necessary, personal data may be processed by trusted service providers acting on our behalf or providing services to us, including:

website hosting and infrastructure providers;
email and communication service providers;
website maintenance and security providers;
analytics providers, including Google;
professional advisers such as accountants, legal advisers or auditors where necessary.

We provide service providers only with the information reasonably necessary for the relevant service.

We may also disclose personal data where required by law, regulation, court order or a competent public authority.

9. International transfers of personal data

Some service providers we use, including global technology providers such as Google, may process data in countries outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we seek to ensure that an appropriate lawful transfer mechanism is in place, such as:

a European Commission adequacy decision;
Standard Contractual Clauses approved by the European Commission; or
another legally recognised safeguard.

The specific safeguards used may depend on the service provider and the country in which processing takes place.

10. How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it was collected or where retention is required by law.

As a general principle:

enquiries that do not result in a client relationship may be retained for up to 24 months after the last relevant communication, unless there is a reason to delete them earlier or retain them longer;
client and contractual correspondence may be retained for the duration of the business relationship and afterwards where necessary for legal, accounting, contractual or legitimate business purposes;
records required by accounting, tax or other legislation are retained for the period required by applicable law;
technical and security information is retained only for as long as reasonably necessary for website operation, troubleshooting and security;
Google Analytics information is retained according to the retention settings configured in our Google Analytics property and our ongoing data-minimisation requirements;
cookie consent information is retained for the period necessary to demonstrate and manage consent.

We may retain particular information for longer where reasonably necessary to establish, exercise or defend legal claims or comply with a legal obligation.

11. Data security

We take reasonable technical and organisational measures to protect personal data against:

unauthorised access;
accidental loss;
unlawful disclosure;
alteration;
destruction; and
other unlawful processing.

However, no website, online service or electronic communication method can be guaranteed to be completely secure.

12. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete personal data;
request erasure of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive applicable personal data in a portable format;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a supervisory authority.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise your rights, contact us at:

info@metlo-infra.com

We may need to request reasonable information to verify your identity before responding to a request involving personal data.

13. Right to lodge a complaint

If you believe that your personal data has been processed unlawfully, we encourage you to contact us first so that we can investigate and address your concern.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For METLO ENGINEERING OÜ in Estonia, the supervisory authority is:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Tatari 39
10314 Tallinn
Estonia

Email: info@aki.ee
Website: https://www.aki.ee

If you are located in another EEA country, you may also have the right to contact the data protection authority in your country of residence.

14. Visitors from outside the European Economic Area

Our website may be accessed by visitors from countries outside the EEA, including the United Kingdom and the United States.

Where privacy or data protection legislation applicable to a visitor grants additional rights, we will respect those rights to the extent that the relevant legislation applies to our processing activities.

15. Third-party websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, security or content of websites operated by third parties. We recommend reviewing the privacy information provided by those websites before providing them with personal information.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes to our website or services;
changes to the technologies or service providers we use;
changes to our data-processing practices; or
changes to applicable legal requirements.

The latest version will always be published on this page together with the date of the most recent update.

17. Contact us

If you have questions about this Privacy Policy, the processing of your personal data or your data protection rights, please contact: