Privacy policy

How KL Raamatupidamine collects, uses and protects your personal data.

Last updated 17.10.2026

Luht Grupp OÜ (trading as KL Raamatupidamine, hereinafter “we”) handles the data of its clients, partners, job applicants and website visitors with care. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Estonian legislation. In this document we explain what data we process, why and for how long, and what rights you have.

1. Controller

Luht Grupp OÜ (KL Raamatupidamine)
Registry code 16334281, VAT no. EE102420575
Address: Teguri 55, 50107 Tartu, Estonia
Email: kaideliis@klraamatupidamine.ee
Phone: +372 5880 2654

For any questions about personal data, please contact us at the email address above.

2. What data we process and why

Situation	Data	Goal	Legal basis
Enquiry via contact form, email or phone	name, email, phone, company name, message content	responding to the enquiry and preparing a quote	steps necessary to enter into a contract, legitimate interest
Booking an introductory call	name, email, chosen time, additional information	arranging the meeting and sending reminders	steps necessary to enter into a contract
Providing services to clients	contact details of client representatives, contract and billing data	performing the contract, invoicing	performance of a contract, legal obligation
Client accounting and payroll	data on the client's employees and transaction counterparties that the client provides to us	providing accounting and payroll services	we process the data on the client's behalf and according to their instructions (as a processor)
Subscribing to the newsletter	name, email	sending the newsletter and information about training	consent, which you can withdraw at any time
Applying for a job	CV, contact details, answers in the application form	recruitment and communicating with candidates	consent, steps necessary to enter into a contract
Visiting the website	IP address, browser data, cookies	website functionality, security and visitor statistics	legitimate interest; consent for statistics cookies

We do not use your data for automated decision-making or profiling that would have legal effects on you.

3. Who we share data with

We do not sell data. We share it only to the extent necessary to provide our services:

IT and hosting providers (web hosting, email, backups);
providers of the accounting and payroll software we use to serve our clients;
newsletter and appointment booking service providers;
public authorities (e.g. the Estonian Tax and Customs Board, the Business Register) where required by law or authorised by the client.

All processors are required to protect the data and use it only according to our instructions. If a service provider is located outside the European Economic Area, we use the safeguards provided for in the GDPR, such as the European Commission's standard contractual clauses.

4. How long we keep data

Enquiries and correspondence: until the enquiry has been resolved and then for a reasonable period in case of follow-up questions.
Contract and billing data: 7 years from the end of the financial year, as required by the Accounting Act.
Client accounting data: for the duration of the contract and as agreed with the client.
Newsletter data: until you unsubscribe.
Application documents: until the end of the recruitment process, unless you have agreed to longer retention.

5. Cookies

This website uses cookies. Necessary cookies are essential for the website to work; we use statistics cookies only with your consent. More information is available in our cookie policy and you can change your choice via the link Cookie settings.

6. Your rights

You have the right to:

be informed about what data we process about you, and receive a copy of it;
request the correction of inaccurate data;
request the erasure of data when we no longer have grounds to keep it;
restrict the processing of your data or object to it;
receive the data you have provided in a machine-readable format (data portability);
withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to kaideliis@klraamatupidamine.ee. We will respond within one month at the latest. If you believe we have violated your rights, you can contact the Estonian Data Protection Inspectorate (www.aki.ee) or go to court.

7. Data security

We use technical and organisational measures to protect data: a secure (HTTPS) connection, restricting access to employees who need the data for their work, regular backups and website security protection. Our employees are bound by a duty of confidentiality.

8. Changes

If our data processing changes, we will update this document. The current version is always available on this page, and the date at the top shows the most recent change.