Effective from 3 November 2026.
1. Who processes your data
The data controller is Liiklusekspert MTÜ (APEX Moto- ja Autokool), registry code 80603114, Tallinn. Contact: apexautokool@gmail.com, tel +372 55914004.
2. What data we collect
- When you register: first and last name, personal identification code, phone, e-mail, desired category, language of instruction and preferred start time; for minors, the name and contact of a parent.
- Medical certificate: only whether you have a valid driver’s medical certificate and its expiry date. We do not ask for diagnoses or health data.
- During training: study card data (including a photo), dates and assessments of driving lessons, exam results, invoices and payments.
3. Why and on what legal basis
| Purpose | Legal basis |
|---|---|
| Concluding and performing the training contract, scheduling lessons, invoicing | Contract (GDPR Art. 6(1)(b)) |
| Registering the student in the Transport Administration’s e-service and submitting certificate data to the traffic register | Legal obligation (GDPR Art. 6(1)(c); Traffic Act) |
| Issuing certificates and statements and storing their data | Legal obligation (Adult Education Act) |
| Accounting | Legal obligation (Accounting Act) |
| Sending a newsletter | Your consent — only if you ticked it separately. You can withdraw consent at any time. |
4. Who we share data with
- Transport Administration (Transpordiamet) — student registration and training completion data (legal obligation).
- Service providers processing data on our behalf: web hosting (Zone Media OÜ) and e-mail service. They may not use the data for their own purposes.
We do not sell data or share it for advertising.
5. How long we keep data
- Data on certificates, statements and registration sheets — at least 5 years.
- Accounting documents — 7 years.
- Registrations that did not lead to a contract — deleted within 6 months.
6. Minors
A training contract with a minor is concluded together with a parent or guardian. The parent’s contact details are used only for communication about the training.
7. Your rights
You have the right to access your data, request its correction, deletion or restriction of processing, object to processing and receive your data in a machine-readable format. Write to apexautokool@gmail.com — we will reply within one month. Data that we are required by law to keep cannot be deleted before the end of that period.
If you believe we are violating your rights, you can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee.
8. Data security
The website uses an encrypted connection (HTTPS). Only the school’s management and instructor have access to registration data. Personal identification codes are not sent by ordinary e-mail.
9. Cookies
The website uses only technical cookies needed for it to work (e.g. language selection and login). We do not use advertising or tracking cookies.
10. Changes
We may update this privacy policy. The current version is always on this page.