How we handle personal data.

Cookie3 OU is the controller of personal data described in this Privacy Policy.

Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Parda tn 6, 10151, Estonia. Corporation Code: 16457724. Tax Identification Number: EE102487893.

You can contact us about privacy matters at contact@cookie3.ee.

When you contact us, we may process your name, email address, company, role, message and any other information you choose to provide.

When you visit this website, our hosting and security providers may process technical information such as your IP address, browser and device information, requested pages, timestamps and security events.

We process contact data to respond to enquiries, discuss potential work and manage business relationships. Depending on the context, the legal basis is taking steps before entering into a contract or our legitimate interest in communicating with prospective and existing clients.

We process technical data to deliver, secure and maintain the website, prevent abuse and diagnose problems. The legal basis is our legitimate interest in operating a secure and reliable website.

We may also process data where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

This website does not currently use Google Analytics or other analytics, advertising or behavioural profiling cookies. Our hosting and security providers may use cookies or similar technologies that are strictly necessary to deliver and protect the website.

If we introduce analytics, advertising or other non-essential technologies, we will update this policy and request consent where required.

We may share personal data with trusted service providers supporting website hosting, security, email, IT operations and professional advice. They may process data only for the relevant service and under appropriate contractual safeguards.

We may also disclose data where required by law, a competent authority or for the protection of our legal rights.

Some service providers may process data outside Estonia or the European Economic Area. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

We keep personal data only for as long as necessary for the purpose for which it was collected, including responding to enquiries, maintaining business records, meeting legal obligations and handling potential claims.

Technical logs are retained for the periods required for website operation and security. Retention may be extended where an incident, legal obligation or dispute requires it.

Subject to applicable law, you may request access to, correction or deletion of your personal data. You may also request restriction of processing, object to processing based on legitimate interests and request data portability where applicable.

Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.

To exercise your rights, email contact@cookie3.ee. We may need to verify your identity before completing a request.

If you believe that your data protection rights have been infringed, you may contact us first or lodge a complaint with the Estonian Data Protection Inspectorate.

Estonian Data Protection Inspectorate

We may update this policy when our website, services or legal obligations change. The latest version will always be published on this page.