Privacy Policy

Last updated: 15 November 2025

This Privacy Policy explains how Digikolleeg OÜ (“we”, “us”, or “our”), a company established in Estonia, collects, uses, discloses, and protects personal data when visitors access our website https://www.digikolleeg.ee (“Website”) or contact us for business inquiries. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Estonian data privacy legislation.

1. Data Controller
   Company name: Digikolleeg OÜ (17425525)
   Email: [email protected]
   Phone: +372 550 5471

2. Personal Data We Collect
   2.1. Automatically Collected Data (Cookies & Log Data)
   When you visit our Website, we collect technical data automatically sent by your browser, including: IP address, browser type and version, device and operating system information, referrer URL, date and time of access, pages viewed, standard technical cookies necessary for the website to function
   We do not use marketing or tracking cookies unless explicitly stated and consented to.
   2.2. Data Provided Through the Contact Form
   If you contact us through our online form, we process the personal data you voluntarily provide, such as: name, email address, company name, message or inquiry details, any additional information you choose to submit.

3. Purposes and Legal Basis for Processing
   We process personal data for the following purposes and legal bases:
   3.1. Website Operation (Legitimate Interest – Art. 6(1)(f) GDPR)
   To ensure the technical functionality, security, and performance of the Website through essential cookies and server logs.
   3.2. Responding to Inquiries (Pre-contractual Steps – Art. 6(1)(b) GDPR)
   To review and respond to your contact requests, including business inquiries.
   3.3. Security and Fraud Prevention (Legitimate Interest – Art. 6(1)(f) GDPR)
   To protect our systems, prevent misuse, and maintain service integrity.

4. How We Use Personal Data
   We use the collected personal data to: operate and improve the Website, respond to messages and business inquiries, communicate with potential clients, maintain security and diagnose technical issues, comply with legal obligations when necessary
   We do not: sell personal data, use personal data for automated decision-making or profiling, share data with third parties for marketing purposes.

5. Cookies
   We use only essential, strictly necessary cookies required for the Website to function.
   These cookies: do not track users across other websites, cannot be opted out of as they are required for core functionality.
   If any non-essential cookies are added in the future, visitors will receive a cookie banner requesting consent.

6. Data Sharing and Recipients
   We may share personal data only with the following categories of recipients: s ervice providers (e.g., hosting providers, IT/security support), legal authorities where required to comply with legal obligations.
   All service providers operate under confidentiality agreements and comply with GDPR.
   We do not transfer personal data outside the EU/EEA unless adequate safeguards (e.g., Standard Contractual Clauses) are in place.

7. Data Retention
   We retain personal data only as long as necessary for its intended purpose or as required by law:
   Contact form inquiries: retained for up to 12 months unless a business relationship is established.
   Server logs and technical data: retained for 30–90 days depending on security needs.
   Legal records (if applicable): retained in accordance with statutory retention periods.
   After expiry, data is securely deleted.

8. Your Rights Under GDPR
   You have the following rights regarding your personal data: right of access – request a copy of your data, right to rectification – correct inaccurate data, right to erasure – request deletion where legally possible, right to restrict processing, right to data portability, right to object to processing based on legitimate interests, right to lodge a complaint with a supervisory authority.
   Your local data protection authority can be found via: https://edpb.europa.eu
   To exercise your rights, contact us via email or via website contact form.

9. Security Measures
   We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and secure hosting.

10. Links to Third-Party Websites
    Our Website may contain links to external sites. We are not responsible for the content or privacy practices of third-party websites.

11. Updates to This Privacy Policy
    We may update this Privacy Policy periodically. The latest version is always available on our Website, with the “Last Updated” date indicating changes.

12. Contact
    For questions about this Privacy Policy or GDPR rights contact us via email or via website contact form.