Privacy & Cookies Notice

Last updated: 30 July 2026

This notice explains how MK Consulting processes personal data and how mkconsulting.ee uses browser storage.

1. Controller

The controller is MK Aviation Consulting OÜ, registry code 16577871, operating under the trade name MK Consulting, registered address Supluse pst 1, Pirita linnaosa, 11911 Tallinn, Harju maakond, Estonia.

Privacy enquiries: info@mkconsulting.ee.

2. Data we may process

Depending on the interaction, we may process your name, role, employer, business and personal contact details, communications, instructions, contractual and billing information, project records, documents supplied for an assignment, and information concerning the persons or organisations involved in that assignment.

We receive data from you, the organisation you represent, clients and project partners, public registers and professional sources, authorities, counterparties, external advisers, and the technical systems used to operate and secure our services.

3. Why and on what basis we process data

• Enquiries and proposals: to respond, assess a possible assignment, check suitability or conflicts and prepare a proposal. The basis is steps requested before a contract and our legitimate interest in managing business enquiries.
• Client work: to provide, document and manage commercial, product, consumer, regulatory, technology, employment and dispute-support services. The basis is contract performance, requested pre-contract steps, legal obligations and legitimate interests in delivering and defending our work.
• Client acceptance and risk management: to verify identity, authority, ownership, sanctions exposure, conflicts and assignment suitability where appropriate. The basis is legal obligations where applicable and legitimate interests in lawful and responsible client acceptance.
• Billing and administration: to invoice, maintain accounting records and collect amounts due. The basis is contract performance, legal obligations and legitimate interests.
• Business development: to maintain professional relationships and send relevant business-to-business communications. The basis is consent where requested or our legitimate interest in proportionate direct marketing. Every electronic marketing message provides an easy way to object.
• Claims, security and compliance: to protect our rights, respond to authorities, investigate misuse and maintain the security of our systems. The basis is legal obligations and legitimate interests.

4. Website enquiries and technical data

The website contact form prepares an e-mail in your own e-mail application. The website does not itself submit or store the text entered into that form. If you send the e-mail, its content is processed through our e-mail service so that we can respond.

The hosting and security environment may process ordinary technical logs, such as IP address, requested page, timestamp, browser information and security events, to deliver and protect the website. Such logs are kept only for as long as reasonably necessary for operation, security, incident handling or legal claims.

5. Recipients and service providers

Data may be accessed by MK Consulting personnel and contractors who need it for their work, technical and professional service providers, accountants, banks, independent lawyers, tax advisers, recruiters, brokers, translators and other specialists involved in an agreed project, and authorities or courts where disclosure is required.

Independent specialists may act as separate controllers under their own privacy notices. Technical providers generally act as processors under contractual data-protection obligations. We share only data reasonably necessary for the relevant purpose.

6. International transfers

Some technology providers or project specialists may process data outside the European Economic Area. Where this occurs, we use a lawful transfer mechanism, such as an adequacy decision, standard contractual clauses and appropriate supplementary safeguards, or another lawful exception.

7. Retention

• Enquiries that do not lead to an engagement are generally kept for up to two years after the last substantive contact.
• Closed assignment files are generally kept for five years, unless a longer period is reasonably required by law, a limitation period, an ongoing dispute or the nature of the matter.
• Accounting records are generally kept for seven years as required by Estonian law.
• Business-development records are kept until objection or generally for no more than 24 months after the last meaningful interaction, subject to a limited suppression record.

8. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your data and may object to processing based on legitimate interests. You may object to direct marketing at any time. Where processing is based on consent, consent may be withdrawn without affecting earlier lawful processing.

Requests may be sent to info@mkconsulting.ee. You may also lodge a complaint with the Estonian Data Protection Inspectorate or another competent supervisory authority in the European Economic Area.

9. Cookies and local storage

The current website does not intentionally use analytics cookies, advertising pixels, behavioural profiling, reCAPTCHA, embedded scheduling or social-media tracking cookies.

The current theme does not intentionally set non-essential cookies or local-storage values and therefore does not display a cookie-consent banner. If analytics, advertising, embedded booking, chat or similar technology is added, this notice and an appropriate consent mechanism must be updated before activation.

10. Security and changes

We use proportionate organisational and technical measures intended to protect personal data. No electronic system is completely secure; please notify us promptly if you suspect that information has been compromised.

We may update this notice when our services, providers, website technology or legal obligations change. The current version and update date will remain available on this page.