Privacy Policy

1. Introduction

Dataforest OÜ (Registration Number: 14727250) ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including but not limited to:

• Name and contact information (email address, phone number)
• Company name and job title
• Project requirements and specifications
• Payment information (processed through secure third-party providers)
• Communication preferences

2.2 Automatically Collected Information

We may automatically collect certain information when you visit our website:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on our site
• Referring website addresses

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our services
• To process and fulfill your service requests
• To communicate with you about our services
• To send you updates and marketing communications (with your consent)
• To improve our website and services
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given us clear consent to process your data
• Contract: When processing is necessary for the performance of a contract
• Legal obligation: When we must process data to comply with legal requirements
• Legitimate interests: When processing is necessary for our legitimate business interests

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To trusted service providers who assist us in operating our business
• When required by law or legal process
• To protect our rights, property, or safety
• In connection with a business transaction (merger, acquisition, etc.)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure data transmission protocols
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Generally:

• Contact information: Retained for 3 years after last contact
• Project data: Retained for 7 years for legal compliance
• Marketing data: Retained until you opt out
• Website analytics: Retained for 2 years

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

9. Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about our cookie practices, please refer to our Cookie Policy.

10. International Data Transfers

As we are based in Estonia (EU), your data is processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your data.

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided personal information to us, please contact us.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our services constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you have concerns about our data processing practices, you have the right to lodge a complaint with the relevant supervisory authority:

Estonian Data Protection Inspectorate
Website: www.aki.ee
Email: [email protected]