Skip to main content

Eesti.ee uses cookies on its websites

Our website uses cookies to improve website performance and provide a more personalised experience. Read more about our cookie policy.
By clicking 'Accept', you consent to the use of analytical cookies. By clicking 'Do not accept', you do not accept analytical cookies. You can withdraw your consent to cookies at any time on the settings page or the cookies page.

Rescue Service: October 14 from 15:00 to 15:10 a public warning test will be carried out, sirens will sound. No danger. More info on olevalmis.ee

Home Accessibility
  • Eesti keeles
  • По-русски
  • In English

Terms of use

Last modified 14.11.2025

1. General terms and conditions

1.1. You can use the data consent service to allow companies to access your personal data in national databases.

1.2. The General Terms and Conditions govern the relationship between the provider of the consent-based data transfer service (hereinafter the ‘Data Consent Service’) and the user of the Data Consent Service (hereinafter the ‘User’). The provider of the Data Consent Service is the Estonian Information System Authority (hereinafter ‘RIA’).

1.3. The Data Consent Service is an e-service that allows the management of consents given by the User for the transfer of data from national databases to a third party.

1.4. The User is a person who agrees to the transfer of their data on the basis of consent.

1.5. A third party is a private sector company that, with the consent of the User, wishes to receive data for the provision of a business service that it offers.

1.6. Consent is the voluntary, specific, informed, and unambiguous expression of will of the User, given through a consent form and allowing the transfer of their personal data from a national database to a third party.

1.7. The Data Consent Service is free of charge for the User.

1.8. The User is welcome to send comments, remarks, and suggestions for improvements to the Data Consent Service via the webpage: https://www.eesti.ee/eraisik/en/vajad-abi

2. Rights and obligations of the parties

2.1. RIA has the obligation to implement appropriate technical and organisational measures to protect the confidentiality, integrity, and availability of personal data.

2.2. If the User discovers or suspects, in the process of using the Data Consent Service, the occurrence of a circumstance, the materialisation of which may harm the interests of any party and is in conflict with the applicable legislation, the User is obliged to immediately notify the Estonian Information System Authority.

2.3. The improper use of the Data Consent Service or any other activity that is aimed at harming the interests of the state or any of the parties or disrupting the functioning of the state and/or is in conflict with the applicable legislation, is considered an offence and will be dealt with in accordance with the general procedure.

2.4. RIA has the right to unilaterally change the Terms of Use and other guidelines available on the Data Consent Service. The amended Terms of Use will be published on the website of the Data Consent Service and will become effective upon publication on the website. The User will not be informed separately of any changes to the Terms of Use. If the User continues to use the Data Consent Service, this will be interpreted as agreement to the changes.

2.5. RIA is not liable for any damages or loss of income resulting from the use or non-use of the Consent Service.

2.6. RIA is not responsible for any further processing of data that has been transmitted to a third party via the Data Consent Service.

3. Processing of personal data

3.1. The personal data of the User is processed in accordance with the EU General Data Protection Regulation, the Personal Data Protection Act, and other legislation governing the protection of personal data.

3.2. In the provision of the Data Consent Service, personal data is collected, processed, and stored in accordance with the principles of purpose limitation and data minimisation, to the extent necessary for the operation of the service.

3.3. The personal data controller for the processing of the consents given in the Data Consent Service is RIA.

4.1. The User can withdraw their consent at any time by clicking on the ‘Withdraw consent’ button in the Data Consent Service interface.

4.2. Withdrawn consent stops further transfers of data to third parties.

4.3. Withdrawal of consent does not constitute a return of the consented data by the third party. The User may request a third party to stop the processing of the personal data transferred on the basis of consent in accordance with the General Data Protection Regulation, the Personal Data Protection Act, and other legislation regulating the protection of personal data.

5. Technical specifications

5.1. The technical data stored in the Data Consent Service will not be made available to third parties in personalised form.

5.2. Cookies are used to identify the User session.