Privacy notice

• Who you are: name, photo, email, phone, home base, date of birth, nationality, education and driving licence.
• Your work: WINDA ID, certificates and the certificate documents you upload, roles, technical disciplines, level, turbine platforms, systems, languages, work experience and your professional summary.
• Your availability and status, the rate you are looking for, and the hours you submit on a project.
• Your emergency contact — name, phone and relationship.
• Offers you receive, your answers, the teams you belong to, and messages you send us.

Why: so companies can find you, check you are qualified for the job, make you an offer, and so hours and compliance records exist for work actually done. The legal basis is our agreement with you when you use the platform, and our legitimate interest in running a safe and verifiable hiring platform. Using it is free for technicians.

Company name, registration and VAT number, country, billing address, billing email, the contact people on the account, its projects, its own workforce records, saved favourites and the rates agreed with us. Used to run the account, staff projects and invoice.

This is not a promise on paper — the app enforces it in the database, so a company that is not on this list cannot load the data at all.

• Before an offer is accepted — a company can see your name, photo, home base, roles, disciplines, level, years of experience, turbine platforms, systems, languages, availability, work experience and the status of your certificates, but only when you actually come up in their crew search, they have saved you as a favourite, you are already on one of their projects, or you are their own workforce.
• After an offer is accepted — the company staffing that project also sees your contact details and your certificate documents, so they can put you on site and prove your certificates to the site owner.
• The site supervisor on a project you are assigned to sees what they need while that project is running, and no longer.
• Nobody outside WindTech ever sees your date of birth, nationality, emergency contact, the rate you are hoping for, your reliability score, or our internal cost and margin figures. None of these appear in a compliance package or a shared certificate pack.
• The WindTech team can see your account in order to support it, review certificates and fix problems.

Your emergency contact is not part of your visible profile. It can be opened only by the WindTech team and by the site supervisor of a project you are working on, while that project is active. Every single viewing is logged with who looked, when, and for which project — ask us and we will tell you whether anyone has.

• Supabase (database and file storage, hosted in the EU) — holds everything described here: profiles, certificate documents, projects, hours and messages. They process it for us and do not use it for anything else.
• An AI reading service, reached through Lovable's AI gateway — when you upload a certificate or a WINDA record, the image or PDF is sent to be read so the certificate name, holder name and dates can be filled in automatically. It receives that document and nothing else from your profile, and the result comes straight back to your account. It is not used to train models.
• An email delivery service, through Lovable's email infrastructure — receives your email address, your name and the content of the message being sent (offer, reminder, reply), in order to deliver it.
• Companies on the platform, exactly as described in "Who can see a technician's details" above.

We never sell personal data and never pass it to advertisers. If a request arrives from a public authority we only comply where the law requires it.

What is stored: your name, your email address, the subject and body of your message, the date and time it was sent, the role of your account if you were signed in, and our replies. For messages sent without signing in we also store a one-way fingerprint derived from your network address — it cannot be turned back into your address and exists only to stop the form being flooded.

How long: 24 months from the last message in the thread, then deleted automatically. Two years covers a full contract and renewal cycle, so a question you asked last season is still there when it matters, while nothing lingers indefinitely.

Who sees it: only the WindTech team. Other technicians and companies never see your messages. If you were signed in, you can read your own messages and our replies on the Contact page.

• While your account is open: your profile, certificates and documents stay as long as you want them there — you can delete any of it yourself at any time.
• After an account is closed: the profile, photo, certificates and certificate documents are erased within 30 days.
• Hours and completed-project records are kept for 7 years because accounting and tax law requires it, but they are anonymised — they show the work, not the person.
• Contact messages: 24 months from the last message, as above.
• Access logs, such as who opened an emergency contact: 24 months.

You can ask for a copy of everything we hold about you, have anything wrong corrected, have your data deleted, object to how we use it, or ask us to restrict its use while a question is settled. Write to info@windtechengineering.ee or use the Contact page — we answer within one month.

You do not have to wait for us to delete your data: signed in, your profile page has Delete personal data, which erases your profile, photo, certificates and documents straight away.

Tell us first and we will try to put it right. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, Tallinn, info@aki.ee, or to the data protection authority in the country where you live.

When something material changes we bump the version at the top and ask you to read and accept it again the next time you sign in. Small wording fixes do not trigger that.