Privacy Policy

1. Introduction

Abstractatech OÜ ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. This policy complies with the Estonian Personal Data Protection Act and the European Union General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out contact forms on our website
• Request a consultation or quote
• Subscribe to our newsletter
• Communicate with us via email or phone
• Use our services

This information may include:

• Name and contact information (email, phone, address)
• Company name and professional information
• Project requirements and business needs
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and browser information
• Device and operating system information
• Website usage patterns and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our consulting services
• Communication: To respond to your inquiries and provide customer support
• Business Operations: To manage client relationships and project delivery
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send you relevant information about our services (with your consent)
• Website Improvement: To analyze website usage and improve user experience

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing a contract with you
• Legitimate Interest: When we have a legitimate business interest that does not override your privacy rights
• Legal Obligation: When we need to comply with legal requirements

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in our business operations
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, privacy, safety, or property

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure backup and recovery procedures

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically:

• Client data: Duration of the business relationship plus 7 years for legal purposes
• Marketing data: Until you withdraw consent or request deletion
• Website analytics: 2 years from collection

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing
• Portability: Request transfer of your data to another organization
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us at: [email protected]

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

10. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for any international transfers in accordance with applicable data protection laws.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate if you believe your data protection rights have been violated: