Privacy Policy

Last updated: 2026-09-06

1. Data controller

Bobcat Balti OÜ, registry code 10041773, VAT EE100300794, address Ehitajate tee 107A, 13514 Tallinn, Eesti. For any questions, write to allan@bobcat.ee or call +372 6 511 330.

2. What data we collect

Chat content in the chat window on this site — your messages and topics you show interest in (e.g. which machine or attachment you ask about).
Contact details you provide — name, email, company, if you share them voluntarily in the chat.
A parts order, if you place one in the chat: contact person's name, phone, email, delivery address, optionally company name and registry code, machine model and serial number, the parts ordered with quantities, and any note you add. Alongside it we keep the order number and its status (received, confirmed, ordered, shipped, completed) with the time it changed. Without these details an order cannot be picked or delivered, which is why we ask for them before placing it.
Technical data — IP address, browser identifier, language preference; used to prevent abuse and keep the service running.

3. Why, and on what legal basis

Answering your question — our legitimate interest in providing a working service (GDPR Art. 6(1)(f)), and pre-contractual steps if your question concerns a specific purchase (Art. 6(1)(b)).
If you leave an email or name — we send it, together with a short summary of the conversation, to one of our sales contacts (allan@bobcat.ee) so a team member can follow up. This happens regardless of your cookie choice, because it's based on what you typed into the chat, not on cookies.
Fulfilling a parts order — steps taken at your own request prior to entering into a contract, and performance of that contract (Art. 6(1)(b)). Company name and registry code are needed to issue an invoice; once an invoice is issued, keeping the document is a legal obligation (Art. 6(1)(c)).
Abuse prevention (e.g. throttling excessive requests from one IP) — our legitimate interest (Art. 6(1)(f)).
Personalization (using earlier conversation context to give better answers) — only if you chose "Accept All" (Art. 6(1)(a), consent).

4. Cookies and browser storage

Name	Type	Purpose	Duration
`catbot_lang`	Functional · cookie and browser storage	Remembers your chosen language (EN/ET/RU).	1 year
`catbot_uid`	Necessary · browser storage	Anonymous identifier the request-limit and the service itself depend on; set regardless of your choice.	Until you clear browser data
`catbot_consent`	Necessary · browser storage	Stores your own choice.	Until you clear browser data
`bb_parts_cart_v1`	Necessary · browser storage	The parts basket. It stays in your own browser and reaches us only when you send the request yourself.	Until you empty the basket or clear browser data
`admin_session` / `portal_session`	Necessary · cookie	Sign-in: our staff to the admin dashboard, a customer to their own view via the personal link.	Session only
`_gcl_au`, `_gcl_ls`, `IDE`, `test_cookie`	Marketing · Google, only if you choose "Accept All"	Measuring Google Ads performance. They are not set until you choose "Accept All".	Up to 13 months (set by Google)

Choosing "Necessary Only" still lets you use the chat — the difference is twofold: 1) we don't use earlier conversation context to personalize answers, and 2) the hourly request limit is lower (3 requests/hour vs 10 requests/hour under "Accept All"). The AI model answering you is the same either way.

5. Who we share data with

The text of your messages is processed by our AI service provider (OpenRouter) to generate a reply. A parts order is seen only by our own staff and by you: if you are our customer, the order and its status appear in your personal view, reachable only through the personal link sent to you. If you chose "Accept All", we also use Google to measure ad performance. We don't sell data or share it with third parties beyond those listed here.

6. How long we keep it

For as long as necessary to answer your enquiry and follow up on a possible purchase; after that, data is deleted or anonymized. A parts order is kept until it is fulfilled and for a reasonable time afterwards — so that we can later look up what exactly was supplied (warranty, a repeat order). Documents tied to an actual transaction (if your enquiry turns into a sale) are kept for the period required by law.

7. Your rights

You may request access to your data, correction, deletion, restriction of processing, object to processing, and request data portability. Contact allan@bobcat.ee. If you believe your rights have been violated, you may lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

8. Change your cookie choice

You can change your choice at any time via the "Cookies" link in the page footer — just as easily as you made it the first time.