Privacy Policy

1. Introduction

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard personal information when you visit our website or contact us. Our practices comply with the General Data Protection Regulation (GDPR) and applicable Estonian and EU data protection laws.

Our website is informational and does not use cookies, analytics tools, or third‑party tracking technologies.

2. Data Controller

The data controller responsible for processing your personal data is:

Pinearc OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia

Email: info@pinearc.eu

3. Personal Data We Collect

We collect personal data only when it is necessary to provide our services or respond to your inquiries.

3.1. Data You Provide via the Contact Form

When you use our contact form, we may collect:

  • Name
  • Email address
  • Any information you include in your message

Contact form submissions are sent directly to us via email through our WordPress contact form plugin. We do not store this data in a database or CRM.

3.2. Server Log Data (Automatically Collected)

Our hosting provider, zone.ee, automatically collects minimal technical data to ensure website functionality and security, including:

  • IP address
  • Browser type and version
  • Date and time of access
  • Pages viewed
  • Referrer URL

This data is necessary for secure website operation and is not used for analytics or profiling.

4. No Cookies or Tracking Technologies

Our website does not use:

  • Cookies
  • Analytics tools (e.g., Google Analytics)
  • Marketing or advertising trackers
  • Social media pixels
  • Third‑party embedded content that sets cookies

Your visit is not tracked or analyzed.

5. Purpose and Legal Basis of Processing

We process personal data only for the following purposes:

5.1. Responding to Inquiries

To respond to your contact form submission or email inquiry. Legal basis:

  • Art. 6(1)(b) GDPR — steps prior to entering a contract
  • Art. 6(1)(f) GDPR — legitimate interest in communicating with potential clients

5.2. Ensuring Website Security

Server logs are processed to maintain the security and stability of the website. Legal basis:

  • Art. 6(1)(f) GDPR — legitimate interest in secure website operation

We do not use your data for marketing, profiling, or automated decision‑making.

6. Data Retention

We retain personal data only for as long as necessary:

  • Contact form messages: kept in our email inbox for up to 12 months, unless a business relationship is established.
  • Server logs: retained by zone.ee for security purposes, typically 7–30 days.

We delete or anonymize data once it is no longer required.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data.

Data may be shared only with:

  • zone.ee, our hosting provider, for secure website operation
  • Email service providers, as necessary to receive your contact form message

All third‑party processors are bound by GDPR‑compliant data processing agreements.

We do not transfer personal data outside the EU/EEA unless adequate safeguards are in place.

8. Your Rights Under the GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of your data
  • Right to rectification — correct inaccurate information
  • Right to erasure — request deletion of your data
  • Right to restrict processing
  • Right to object to processing based on legitimate interests
  • Right to data portability
  • Right to withdraw consent (if processing is based on consent)

To exercise your rights, contact us at info@pinearc.eu.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from:

  • Unauthorized access
  • Loss or theft
  • Alteration
  • Misuse

Our website is hosted on secure servers provided by zone.ee, and we follow industry‑standard security practices.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The latest version will always be available on this page, with the updated date shown at the bottom.

Last Updated:

10.03.2026