Personal Data and Business Information Explanation Centre

Here you can find explanations of what business-related personal data Inforegister and related services use, where the data comes from, who can see it, how long it is retained, and how public, logged-in and contractual access differ.

Overview of services and solutions for companies

Find the answer to your question

Choose the topic that best describes your question. Each topic leads to a more detailed explanation or, where appropriate, to the relevant procedure.

Why are the personal identification code and date of birth processed? Explains why accurate identification of a person matters for business information, what a logged-out user sees and what a free logged-in user sees. Direct link: #personal-identification-code
What can a logged-out user see and what can a logged-in user see? Overview of the visibility levels of personal and business data, including the full personal identification code, contact details, business history and company indicators. Direct link: #visibility-levels
Why are historical business relationships retained? Explains the purpose of retaining and displaying historical business relationships and the difference between an active and an inactive entrepreneur. Direct link: #historical-business-relationships
Does a natural person have a credit score or risk score in Inforegister? No. Credit, reputation and risk indicators shown in person-related views are company indicators, not a personal credit score of a natural person. Direct link: #scores
How do Inforegister, Storybook, 1Contact and Kreedix differ? The same source information may be used in different services for different purposes and to a different extent. Direct link: #services
How long is data retained? Overview of the principles for retaining active and historical business relationships, customer data, correspondence, logs and other data. Direct link: #retention
Where does the data come from? Explains the use of the e-Business Register, official register data, data services and other lawful business information sources. Direct link: #sources
What does restriction of personal-profile visibility mean? Explains what restricting profile visibility changes and what it does not change. Direct link: #profile-restriction

Why are the personal identification code and date of birth processed?

Direct section URL: #personal-identification-code

The personal identification code and date of birth are used in a business information environment to distinguish between people with the same or similar names and to connect the correct person with the correct company, management-board role, ownership interest and beneficial-owner relationship.

In the public logged-out view, the full Estonian personal identification code is not displayed. A masked personal identification code and the date of birth are shown. A free logged-in user can see the full personal identification code and open the person’s business history.

Internal processing of the full personal identification code and public display of that code are not the same thing.

What can a logged-out user see and what can a logged-in user see?

Direct section URL: #visibility-levels

A logged-out user can see the person’s main business information, such as name, date of birth, masked personal identification code, current business roles, ownership interests, beneficial-owner relationships and basic company information.

A free logged-in user can see the full personal identification code, business history and more detailed business information, including contact details and historical business relationships.

Not all data processed in the system is visible to all users to the same extent. The detailed access model is described in the guide “Personal and Business Data Visibility Levels”.

Why are historical business relationships retained?

Direct section URL: #historical-business-relationships

If a person remains active in at least one company, their earlier business relationships are retained as historical background. The purpose is to enable the assessment of management and payment-behaviour patterns over time rather than viewing only the person’s current position.

The creation and closure of companies, bankruptcies and compulsory deletions are relevant background factors when assessing business risk. Correct earlier business relationships of an active entrepreneur are therefore not treated merely as outdated information.

If a person no longer has any active business relationship, their historical personal profile is not normally discoverable through search engines. Historical information can be viewed by a logged-in user in the historical view.

Does a natural person have a credit score or risk score in Inforegister?

Direct section URL: #scores

No. Inforegister does not assign a separate consumer credit score, personal financial risk rating or personal reputation score to a natural person.

If a company credit score, business risk indicator, reputation score, payment behaviour or other analytical indicator is shown in a person-related view, the object being assessed is the company. The link to the person indicates the person’s official business role.

How do Inforegister, Storybook, 1Contact and Kreedix differ?

Direct section URL: #services

Inforegister aggregates and links business and credit information with a person’s official business relationships.

Storybook uses business information in the context of digital company profiles, visibility and content services for companies and persons connected with them.

1Contact is a business-to-business customer relationship and CRM solution. Its central object is the company and the business customer relationship, not a public natural-person profile.

Kreedix is an environment for claims, payment behaviour and debt-collection proceedings. Personal data is used there when processing a representative or related person is necessary in the context of a company claim or debt-collection matter.

How long is data retained?

Direct section URL: #retention

While an active business relationship exists, correct business information about the person and their historical business relationships is retained because it forms part of the business and risk background.

When the last active business relationship ends, separate principles apply to the visibility and retention of historical information. As a general rule, further restriction of a historical relationship is assessed after five years if there is no other continuing legal basis or need for processing.

Accounting records, customer relationship data, legal-claim records, logs and backups may be subject to different retention periods.

Where does the data come from?

Direct section URL: #sources

The main source for links between persons and companies is the Estonian e-Business Register and related official registry and data services.

Additional business information may come from other public state registers, Official Announcements, public tax and procedural information, data published by companies themselves and other lawful business information sources.

Since 1 November 2024, downloadable e-Business Register Open Data files have not contained personal identification codes. Downloadable Open Data, official e-Business Register data services and other registry queries must therefore be distinguished from one another.

What does restriction of personal-profile visibility mean?

Direct section URL: #profile-restriction

Restriction of personal-profile visibility concerns the public visibility of a separate personal profile. It does not automatically mean deletion of correct management-board, ownership, beneficial-owner, representation or historical business relationship data from a company profile or from source data.

Use the designated personal-profile visibility restriction form if you wish to request restriction of the public personal profile.

Detailed guides

The following guides cover the topics in more detail and open as separate pages on the Inforegister website.

Personal and Business Data Visibility Levels Public, free logged-in and contractual access; differences between personal and company profiles.
Processing of Personal Identification Code and Date of Birth in Business Information Services Why the personal identification code and date of birth are processed, when they are displayed and what the data sources are.
Inforegister, Storybook, 1Contact and Kreedix - How Data Use Differs Purposes of the services, differences in data use and the role of the personal profile in different environments.
Data Retention Principles and Periods Active and historical business relationships, the five-year principle, customer data, logs and backups.

Official data protection documents

If your question concerns a specific incorrect or outdated data field

Please send the exact URL and identify the specific data field that you believe is incorrect or outdated. This allows us to verify the particular information as quickly as possible and helps avoid unnecessary general correspondence.

If the data field originates from an official register, we first verify the current source data and the update status in our services.

Data subject rights

More detailed information about data subject rights under the GDPR, including access, rectification, erasure and the right to object, is available in our Privacy Policy. Whether a particular right applies depends on the specific data, the purpose of processing and the legal basis.

If, after reviewing the explanations above, you wish to know which personal data is processed specifically about you, you may contact us in writing.