Privacy Policy

Version 1.0 — effective from 18 July 2026.

1. Data controller

The controller of personal data within the meaning of the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act (IKS) is NeriusCognitaren OÜ, registration number 17503018, address: Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia.

Contact for data protection matters: [email protected]. A Data Protection Officer (DPO) has not been formally appointed, as the scale of processing does not exceed the threshold of Article 37 of the GDPR; we will appoint a DPO as our processing volumes grow.

2. What data we collect

We process a limited set of data that you submit yourself through the contact form, along with a minimum of technical data:

• Form data: name, email, and the text of your message about the project.
• Technical data: a hash of the IP address (for spam protection) and the selected interface language (in the browser's localStorage).
• We do not collect special categories of data and do not use forms for payments.

3. Purposes and legal basis

The data is used solely to process your enquiry and respond to it. The legal bases under Article 6(1) of the GDPR are: your consent, expressed by submitting the form (point “a”), and our legitimate interest in responding to enquiries and protecting the website from abuse (point “f”).

4. Recipients and processors

Enquiries are stored on our server (hosting provider Railway) and delivered to us by email via the SMTP2GO mail-sending service. These providers act as data processors under our instructions.

We do not sell your data and do not share it with third parties for marketing purposes.

5. Retention period

We retain the enquiry data for as long as necessary to handle the request and for a reasonable period afterwards in order to maintain correspondence. Upon request to [email protected], we will delete your data unless there is a lawful reason to retain it.

6. Your rights

Under the GDPR, you have the right to:

• access your data and obtain a copy of it;
• have inaccurate data corrected;
• have your data erased (the “right to be forgotten”);
• restrict processing and object to it;
• data portability;
• withdraw your consent at any time;
• lodge a complaint with a supervisory authority — in Estonia, this is the Andmekaitse Inspektsioon (Data Protection Inspectorate).

To exercise your rights, write to [email protected].

7. International transfers

Our processors may host data within the EU/EEA or, when transferring it beyond those borders, apply the safeguards provided for by the GDPR (standard contractual clauses).

8. Changes to this policy

We may update this policy. The current version and its date are always shown at the top of the page.

9. Contact

NeriusCognitaren OÜ, Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. For privacy matters: [email protected].

This information is provided for reference only and does not replace legal advice.