Privacy notice

Last updated September 2026

This notice explains how DILICORE OÜ handles personal data. It covers this website and the assessment, audit and assurance work carried out under the DILICORE name.

Who is responsible

DILICORE OÜ, registry code 16911057, Tööstuse tn 4-7, Turba alevik, 76201 Saue vald, Harju maakond, Estonia, is the controller for the data described below. Contact: kaido.katalsepp@dilicore.com.

This website

The site is a single static page. It sets no cookies, runs no analytics and no tracking scripts, and collects nothing about visitors. Web fonts are loaded from Google Fonts, which will receive your IP address as part of that request; no other data is shared.

If you write to the email address or call the number on the site, that correspondence is retained for as long as needed to respond and to keep a record of the engagement.

Assessment and audit work

Assessments involve processing personal data, including interviews with workers and community members, employment and age verification records, and the names and roles of site personnel.

• Purpose. To carry out assessments against the requirements of the relevant scheme or, in the case of on-the-ground assessments, to produce findings for the commissioning client's own due diligence.
• Legal basis. Legitimate interests in performing a contracted assessment, and compliance with legal obligations where applicable. Where interviews are conducted, participation is voluntary and consent is sought.
• Interview confidentiality. Worker and community interviews are conducted privately. Findings are reported in aggregate or anonymised form, and individuals are not identified to site management except where the individual has given informed consent or where a legal obligation requires it.
• Recipients. Reports are provided to the commissioning client and, where the engagement requires it, to the relevant scheme body. Where work is carried out as an approved assessor under another firm, that firm receives the report as the contracting party.
• Transfers. Assessments take place worldwide, and data may therefore be processed outside the European Economic Area. Appropriate safeguards are applied.
• Retention. Assessment records are kept for the period required by the relevant scheme, or for six years where no scheme requirement applies.

Your rights

Under the GDPR you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, or portability, and you may object to processing based on legitimate interests. Requests should be sent to kaido.katalsepp@dilicore.com.

Some rights are limited where records must be retained under a scheme requirement or to establish or defend a legal claim.

Complaints

If you are not satisfied with how your data has been handled, you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or to the supervisory authority in your country of residence.