1. General Provisions

This privacy policy governs the collection, use, and storage of personal data when using the website carbank.ee by CarCapital OÜ (hereinafter referred to as CarBank). CarBank respects your privacy and protects your personal data in accordance with the European Union's General Data Protection Regulation (GDPR).

2. Responsible processor

CarCapital OÜ
Registration code: 11609788
Address: Tähesaju tee 9, Lasnamäe, Tallinn 13917
Email: info@carbank.ee
Telephone: +372 568 19 999

3. What personal data do we collect

We collect the following personal data:

  • First and last name
  • Personal identification code
  • Contact Information (phone number, email address, postal address)
  • Financial data (income, existing obligations)
  • Vehicle details (make, model, VIN)
  • Website usage data (cookies, IP address)

4. Purposes of Personal Data Processing

We process your personal data for the following purposes:

  • Lease agreement conclusion and fulfillment
  • Creditworthiness assessment
  • Customer Service and Communication
  • Fulfillment of statutory obligations (prevention of money laundering, accounting)
  • Improving and developing services

5. Retention of Personal Data

We retain your personal data only for as long as is necessary to fulfill the purpose for which the data was collected or to comply with legal obligations. Data related to the lease agreement will be retained for at least 7 years after the termination of the agreement in accordance with the Accounting Act.

6. Transfer of Personal Data

We only share your personal data with third parties in the following cases:

  • Creditinfo inquiries (Creditinfo Estonia AS)
  • Insurance companies (for preparing insurance quotes)
  • Notaries and Registries (for entering into contracts)
  • Accounting and Auditing
  • Statutory obligation (e.g., Tax and Customs Board)

7. Your Rights

You are right:

  • To review your personal data
  • Demand correction of inaccurate data
  • Request data erasure (if there is no legal basis for retention)
  • Data processing limitations
  • Data transfer
  • To object to data processing
  • Contact the Data Protection Inspectorate

To exercise your rights, please contact us at info@carbank.ee.

8. Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

9. Amendments

We reserve the right to amend this privacy policy. Amendments will take effect upon their publication on the website. Last updated: March 2026.