Privacy Policy

By using or accessing our sites or by providing personal information to us or through the sites you consent to the collection, use and disclosure of that information in accordance with this privacy notice.

Other Pages

Effective date: 18 April 2026

1. Introduction

TrivaroTrade OÜ (“we”, “our”, “us”) values your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website https://trivaro.eu and any of its subdomains, contact us, submit a request for quotation (RFQ), or use our services.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller

TrivaroTrade OÜ

Reg. no.: 17204054

Address: Maleva 2, 13629 Tallinn, Estonia

Email: info@trivaro.eu

Phone: +372 56 567 216

3. Data We Collect

We may collect the following categories of data:

Contact Information — name, company name, position, email address, phone number.
Business Information — company registration details, VAT number, project requirements.
Product Catalog Requests — product interests, quantity requirements, project timeline, delivery location, company size/type (collected via catalog request forms, including cart-based inquiries and free-text messages).
Website Usage Data — IP address, browser type, operating system, pages visited, and access times.
Cookies & Tracking Data — preferences, session IDs, analytics identifiers (see Section 7).
Communications — messages sent via our contact forms, email, or chat.

4. How We Use Your Data

We use your personal data for:

Service delivery — processing inquiries and RFQs, preparing quotations, fulfilling orders.
Customer communication — answering questions, sending updates, and providing technical support.
B2B verification — validating company registration and VAT identification (e.g. via VIES) where required.
Marketing — sending relevant product offers (with consent for general marketing; legitimate interest for product updates to existing inquirers, with easy opt-out in every message).
Website improvement — analysing usage data for UX and security enhancements.
Legal compliance — fulfilling obligations under applicable laws.

5. Legal Basis for Processing

We process personal data under the following GDPR legal grounds:

Pre-contractual steps (Art. 6(1)(b)) — when processing is necessary for steps taken at your request prior to entering into a contract (quote requests, product inquiries), as well as for the performance of any contract subsequently concluded with you.
Legitimate interest (Art. 6(1)(f)) — for business development, fraud prevention, security of the Site, website analytics, and product updates sent to existing inquirers.
Consent (Art. 6(1)(a)) — for general marketing communications and optional cookies.
Legal obligation (Art. 6(1)(c)) — when processing is required by law (e.g. tax and accounting).

For further detail on the legal bases that apply to RFQs and quotations, see Section 4.4 of our Terms & Conditions.

6. Data Retention

We retain personal data only for as long as necessary to:

Provide our services;
Fulfil our contractual and legal obligations (including statutory accounting and tax retention periods under Estonian law);
Resolve disputes;
Enforce agreements.

When data is no longer needed, we securely delete or anonymise it.

Specific retention periods include:

Quote Requests — successfully converted requests are retained for the duration of the contract plus 7 years (Estonian business records requirement). Non-converted requests are retained for up to 24 months for follow-up and market analysis purposes, after which they are deleted or anonymised.
Accounting and tax records — retained for 7 years as required by the Estonian Accounting Act (Raamatupidamise seadus).
Website analytics — aggregated and pseudonymised within the standard analytics tool retention windows.

7. Cookies & Tracking Technologies

We use cookies and similar technologies (including browser local storage) on the Site. They are organised into three categories that mirror the toggles in our Cookie Settings panel:

Essential — required for the Site to function, including session state, security, language preference, and the inquiry cart. Always active and cannot be disabled.
Analytics — help us understand how visitors interact with the Site. Loaded only with your consent. We use Google Analytics 4 via Google Tag Manager.
Marketing — used to measure advertising effectiveness and deliver relevant offers. Loaded only with your consent. We use Google Ads, including Enhanced Conversions (pseudonymised, SHA-256-hashed identifiers derived from form submissions), and may store Google click identifiers (gclid, gbraid, wbraid) in your browser for up to 90 days for conversion attribution.

We implement Google Consent Mode v2. Visitors from the EEA, the United Kingdom, and Switzerland are shown a cookie banner on first visit; analytics and marketing tags do not fire until consent is granted. Your choices are stored locally in your browser and can be changed or withdrawn at any time via the Cookie Settings link in the footer of the Site, or by blocking cookies and storage through your browser settings.

We may share your data with:

Service providers — IT support, hosting, analytics, marketing platforms, email and PDF generation providers acting on our behalf.
CRM and automation platforms — for efficient quote processing, customer relationship management, and sales pipeline tracking.
Business partners — for joint projects (with your consent).
Authorities — when required by law or to protect our legal rights.

We do not sell your personal data.

9. International Data Transfers

Where necessary, data may be transferred outside the EU/EEA, but only to countries ensuring adequate protection (or with appropriate safeguards, such as Standard Contractual Clauses).

You have the right to:

Access your personal data;
Rectify inaccurate data;
Request deletion (“right to be forgotten”);
Restrict processing;
Object to processing;
Data portability;
Withdraw consent at any time;
Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise these rights, contact us at info@trivaro.eu.

11. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated effective date.

13. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact: