Privacy Policy

Last updated: December 2024

1. Introduction

Gera-IT OÜ ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy complies with the General Data Protection Regulation (GDPR) and Estonian Personal Data Protection Act.

2. Data Controller Information

Company: Gera-IT OÜ

Registration Number: 14585731

Address: Harju maakond, Tallinn, Kesklinna linnaosa, Kaupmehe tn 7-120, 10114, Estonia

Email: [email protected]

Phone: +372 5250757

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

  • Name and contact information (email address, phone number)
  • Company or organization details
  • Communication preferences
  • Information provided in contact forms or inquiries

3.2 Technical Information

We automatically collect certain technical information when you visit our website:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Referring website
  • Pages visited and time spent on our website
  • Date and time of visits

4. How We Use Your Information

We use your personal information for the following purposes:

  • To respond to your inquiries and provide customer support
  • To provide our platform review and consulting services
  • To communicate with you about our services
  • To improve our website and services
  • To comply with legal obligations
  • To send marketing communications (with your consent)

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you have given explicit consent for specific processing activities
  • Contract: When processing is necessary for the performance of a contract
  • Legitimate Interest: When we have a legitimate business interest that doesn't override your rights
  • Legal Obligation: When we need to comply with legal requirements

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • With service providers who assist us in operating our website and business
  • When required by law or to protect our rights
  • In connection with a business transaction (merger, acquisition, etc.)
  • With your explicit consent

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL encryption for data transmission
  • Secure data storage systems
  • Access controls and authentication
  • Regular security assessments

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specifically:

  • Contact form submissions: 3 years
  • Email communications: 3 years
  • Website analytics data: 26 months
  • Cookie data: As specified in our Cookie Policy

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request information about the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate personal data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of processing of your data
  • Right to Data Portability: Request transfer of your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for consent-based processing

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

11. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • European Commission adequacy decisions
  • Standard Contractual Clauses
  • Binding Corporate Rules

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: [email protected]
  • Phone: +372 5250757
  • Address: Harju maakond, Tallinn, Kesklinna linnaosa, Kaupmehe tn 7-120, 10114, Estonia

15. Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate:

Estonian Data Protection Inspectorate
Website: www.aki.ee
Email: [email protected]