Privacy Policy

1. Introduction

Dataforest OÜ ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Contact us through our contact form
• Request a quote or consultation
• Subscribe to our newsletter
• Engage with our services

This information may include:

• Name and contact information (email, phone number, address)
• Company information
• Project requirements and technical specifications
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on our site
• Referring website information

3. How We Use Your Information

We use the collected information for the following purposes:

• To respond to your inquiries and provide requested services
• To communicate with you about projects and services
• To improve our website and services
• To send periodic emails about our services (with your consent)
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific purposes
• Contract: When processing is necessary for contract performance
• Legitimate Interest: When we have legitimate business interests that don't override your rights
• Legal Obligation: When required by law

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With your explicit consent
• To fulfill service obligations (e.g., with trusted service providers)
• When required by law or legal process
• To protect our rights or the safety of others
• In connection with a business transfer or merger

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure hosting and infrastructure

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact information: Until you request deletion or withdraw consent
• Project-related data: For the duration of the project plus 7 years for legal compliance
• Website analytics: Up to 26 months
• Marketing communications: Until you unsubscribe

8. Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookies Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

12. International Data Transfers

Your information may be transferred to and processed in countries outside your residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

15. Data Protection Officer

For matters related to data protection and privacy, you can contact our Data Protection Officer at [email protected].

16. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority.