Privacy Policy

1. Data Controller

The data controller of personal data is:

2. Personal Data We Collect

We may process the following personal data:

• Identification data — name, position, company name
• Contact data — email address, phone number
• Technical data — IP address, browser and device information
• Usage data — data about use of the website (e.g. visited pages, sessions)
• Communication data — information sent to us in inquiries and correspondence

We do not intentionally collect or process special categories of personal data (sensitive data), except where legally required.

3. How Personal Data Is Collected

Personal data is collected:

• Via contact forms on the website
• From email and telephone communications
• Via cookies and analytics tools
• In the course of building business relationships and contacts

4. Legal Bases for Processing

Processing of personal data is carried out on the following bases:

• Legitimate interest — running the business, developing services, and B2B communications
• Consent — for non-essential cookies and marketing messages
• Performance or preparation of a contract
• Compliance with a legal obligation

5. Purposes of Processing

Personal data is used:

• To respond to inquiries and provide services
• To manage client and partner relationships
• To develop the website and our services
• To analyse usage statistics and performance
• To share relevant business information (on a valid legal basis)

6. Cookies and Tracking Technologies

This website uses cookies and similar technologies for a better user experience and to keep the site running reliably. By continuing to use this site after seeing our cookie notice, you accept this use. You can read more about how we handle personal data in this Privacy Policy.

7. Sharing of Personal Data

Personal data may be shared with:

• IT and technical service providers (e.g. hosting, analytics, CRM)
• Professional advisors (legal and financial)
• Competent authorities, where required by law

All processors are required to comply with data protection requirements. We do not sell your personal data.

8. Transfers Outside the EEA

When transferring personal data outside the European Economic Area, we apply appropriate safeguards, including:

• European Commission Standard Contractual Clauses (SCCs)
• Adequacy decisions for countries that ensure an adequate level of protection

9. Data Retention

Personal data is retained only for as long as necessary to manage business relationships, fulfil contractual and legal obligations, and pursue legitimate interests. After the retention period ends, the data is deleted or anonymised.

10. Your Rights Under GDPR

You have the following rights regarding your personal data:

• The right to access your personal data
• The right to request correction of data
• The right to request erasure of data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time

To exercise these rights, please contact us using the details below. We will respond within one month.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

11. Data Security

We apply appropriate technical and organisational security measures to protect personal data from unauthorised processing, disclosure or destruction.

12. Third-Party Links

The website may contain links to third-party websites. We are not responsible for their data protection practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page. Where changes are significant, we will take appropriate steps to inform you.