Privacy Policy and Data Protection Notice

Data controller

Your personal data is processed by the company identified below, acting as data controller.

Personal data we process

We collect only what is necessary to deliver our services:

• •Identity and contact data: name, email address, phone number, company name
• •Request content: the content of the message you send via our contact form or WhatsApp
• •Transaction data: contract, quotation and invoice details
• •Technical data: IP address, browser and device information, pages visited and time spent
• •Cookie data: described in the "Cookies" section below

Purposes and legal bases

• •Responding to your enquiry and preparing a quotation — pre-contractual steps (GDPR Art. 6(1)(b))
• •Entering into the contract and delivering the service — performance of a contract (GDPR Art. 6(1)(b))
• •Invoicing and statutory retention duties — legal obligation (GDPR Art. 6(1)(c))
• •Measuring site performance and improving the service — legitimate interests (GDPR Art. 6(1)(f))
• •Marketing communication and optional cookies — consent (GDPR Art. 6(1)(a)); you may withdraw consent at any time

Cookies

We may use strictly necessary cookies required for the site to function, and analytics cookies that help us understand visit statistics. Necessary cookies cannot be switched off. Analytics and marketing cookies run only with your explicit consent.

You can manage your cookie preferences and delete existing cookies through your browser settings. If you block cookies, some parts of the site may not work as expected.

Who we share data with

We do not sell your personal data. It is shared only as far as necessary to deliver the service, with the following categories of providers:

• •Hosting and infrastructure providers (serving the site and handling form submissions)
• •Email delivery providers (so form notifications reach us)
• •Analytics and ad measurement providers (only where you have given consent)
• •Payment institutions (once payment is enabled; we never store your card details)
• •Competent public authorities (only where legally required)

International transfers

The infrastructure and communication services we use may be hosted within the European Union or in countries recognised by the European Commission as providing adequate protection. Where a transfer to a country without an adequacy decision is necessary, appropriate safeguards such as Standard Contractual Clauses are applied under the GDPR. For people resident in Türkiye, the conditions of Article 9 of the KVKK are observed.

Retention periods

We keep your data only for as long as the purpose requires:

• •Enquiries that did not result in a contract: 12 months from last contact
• •Contract and customer records: for the statutory limitation period after the relationship ends
• •Invoices and accounting records: for the period required by applicable law
• •Cookie data: between the session duration and 24 months, depending on cookie type

Once the period expires or the purpose ceases to exist, your data is deleted, destroyed or anonymised.

Your rights

As a data subject you have the right to:

• •Learn whether your data is processed and request access to it
• •Request rectification of inaccurate or incomplete data
• •Request erasure ("right to be forgotten")
• •Request restriction of processing
• •Receive your data in a structured format and port it to another controller
• •Object to processing and withdraw any consent you have given
• •Lodge a complaint with a supervisory authority (the Estonian Data Protection Inspectorate; or, if you are resident in Türkiye, the Personal Data Protection Authority)

Data security

Your data is protected against unauthorised access, loss and disclosure by reasonable technical and organisational measures. Site traffic is encrypted with SSL/TLS, access rights are limited to what each role requires, and our contact form is protected against abuse.

Contact and requests

To exercise your rights or ask about this notice, contact us through the channels below. Requests are answered within one month at the latest; where a request is complex, that period may be extended and you will be informed.

Changes

This policy may be updated as legislation or our services change. The current version is always published on this page, with the effective date shown above.