Data controller
AIBIS · email [email protected] · phone +372 557 2345 · Narva mnt 9, Tallinn, Estonia. For any data-protection question, write to the same address.
What data and why
Contact form
When you send the contact form we process your name, email address and the content of your message in order to reply. The legal basis is your consent and our legitimate interest in responding to enquiries (GDPR Art. 6(1)(a) and (f)). The form is delivered via Formspree (Formspree Inc., USA); the transfer relies on the European Commission's Standard Contractual Clauses.
Booking form (Book a call)
When you book a time we process your name and phone number, and optionally your company name, website and topic, in order to arrange and confirm the call. The legal basis is pre-contractual steps taken at your request and our legitimate interest (GDPR Art. 6(1)(b) and (f)). The booking notification is sent to us through the email service Resend (Resend Inc., USA).
Server logs
Our hosting provider (Cloudflare) automatically logs the IP address, browser type and request time. We use this data only to keep the site secure and to prevent abuse and spam. The legal basis is legitimate interest (GDPR Art. 6(1)(f)).
Cookies
For an ordinary visitor the site sets no cookies. The only cookie, aibis_portal, is created when an administrator signs in to the internal portal — it is strictly necessary and requires no consent (Estonian Electronic Communications Act § 102(3)). Analytics or marketing cookies would only be set with your prior consent; none are used at present. You can change your choice at any time via the “Cookie settings” link in the footer.
Who we share data with
Your data is seen only by AIBIS and our contracted processors acting on our instructions: Formspree (form delivery), Resend (email sending) and Cloudflare (hosting and security). Data may be disclosed to public authorities where required by law. We do not sell or trade personal data.
Retention
Contact and booking enquiries are kept for up to 12 months after the exchange ends, then deleted or anonymised. Server logs are kept for up to 90 days. If you become a contracting client, some data is retained longer under accounting law.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent at any time. Contact: [email protected]. We respond within one month.
Lodging a complaint
If you believe we are breaching data-protection rules, you may contact the Estonian Data Protection Inspectorate: Tatari 39, 10134 Tallinn · [email protected] · +372 5620 2341 · www.aki.ee.
Changes to this notice
We may update this notice from time to time. The current version is always on this page; where changes are significant we will flag them separately if we can.