1. Scope and roles
This notice applies to the BauHunt website, purchase requests, team workspace, supplier offer form, accounts, and related support. 24EE OÜ is the controller. A supplier acts as a separate controller when it uses buyer data for its own quotation, sale, or contract.
2. Data we process
- Request content, materials, quantities, links, notes, purchase timing, and preferred suppliers.
- Unfinished-form content, its current step, and any contact or delivery details already entered. An unsent form is not shared with suppliers and does not trigger automated reminders.
- Delivery address or pickup area and radius, delivery method, and unloading preference.
- Name, email, phone, company information, account identity, workspace roles and activity.
- Supplier contacts, line or total prices, VAT status, delivery time and cost, availability, PDF offer, and offer link.
- Session, security, IP and technical log data, and support communications where necessary.
3. Purposes and legal bases
We use data to take steps at your request and perform the service, comply with legal duties, and pursue legitimate interests in security, support, service reliability, temporarily retaining unfinished forms to understand input-flow failures, aggregated improvement, and legal claims. Consent is used only where separately requested, such as for any future optional analytics or marketing.
4. Sharing a request
Selected suppliers receive the materials, quantities, timing, delivery or pickup preference, and other information needed to quote. The pickup area and kilometre radius are included in the request sent to suppliers. Contact sharing is on by default so a supplier can deal with you directly; you can turn it off before sending.
A copy already delivered to a supplier cannot be recalled. Contact hunt@bauhunt.ee promptly if you want to withdraw a request.
5. Voice input
Voice input uses your browser’s speech-recognition capability. BauHunt’s server does not receive or store raw audio. Your browser, operating system, or their speech provider may process the audio under its own terms. BauHunt receives the recognised transcript when you add it to the request, and you can review, correct, or delete it before sending.
6. Automated structuring
BauHunt may use rules and, when configured, the OpenAI API to extract products, quantities, units, and clarification questions from request text. The necessary text—not raw voice audio—is shared.
BauHunt may calculate an indicative VAT-inclusive material-price range from its editorial market-price model and, when available, aggregated line prices from comparable genuine offers. The estimate and its coverage may be visible to an authorised administrator and a supplier that receives the request. Test-mode offers are not used for market-price learning.
You review the structured request. We do not make a solely automated decision with legal or similarly significant effects.
7. Recipients and international transfers
Necessary recipients may include selected suppliers, hosting and email providers, Google for sign-in, the browser speech provider, OpenAI for text structuring, IT advisers, and public authorities where legally required. For processing outside the EEA, we rely on an applicable safeguard such as an adequacy decision or Standard Contractual Clauses. Ask us for current details.
8. Retention and security
We keep requests, offers, workspace data, and communications only while needed for the service, active relationship, legal duties, or claims, then delete or anonymise them. An unfinished unsent form is deleted 30 days after the last activity or immediately after successful submission. During that period it is visible to authorised administrators for evaluating the input flow, but it is not shared with suppliers or used for automated follow-up. Login sessions normally expire after 30 days of inactivity and at the latest after 90 days. You may request deletion, subject to lawful retention needs.
We use access controls, encrypted connections, secure session cookies, private random links, input validation, backups, and risk-based logging. Keep account, tracking, and offer links private.
9. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, or portability, object to legitimate-interest processing, and withdraw consent. Email hunt@bauhunt.ee. You can complain to the Estonian Data Protection Inspectorate or your local EU supervisory authority.
10. Children and changes
The service is not directed to anyone under 18. We may update this notice when the service or law changes and will provide reasonable notice of material changes.