Privacy policy

Last updated: 05 June 2026

Privacy Policy

Data Controller

IT Staff OÜ (registry code: 16896470) is the data controller responsible for processing personal data through this website.

For privacy-related questions, contact:

  • Email: [email protected]
  • Address: Harju maakond, Tallinn, Haabersti linnaosa, Vana-Rannamõisa tee 1h/1-15, 13516

What Personal Data We Collect

We may collect:

  • Name
  • Email address
  • Company name
  • Information you provide when contacting us
  • Technical information necessary for operating and securing the website (such as IP address, browser information, and server logs)

Why We Process Personal Data

We process personal data for the following purposes:

Responding to Inquiries

If you contact us, we process your contact details and message content to respond to your request.

Legal basis: legitimate interest (general inquiries) or steps prior to entering into a contract (business inquiries).

Providing Consulting Services

If you become a client, we process information necessary to negotiate, perform, and manage our contractual relationship.

Legal basis: performance of a contract.

We may retain information required by applicable laws, including accounting and tax regulations.

Legal basis: legal obligation.

Website Security

We process limited technical information to maintain website security, prevent abuse, and investigate incidents.

Legal basis: legitimate interest.

Sharing Personal Data

We do not sell personal data.

We may share personal data with trusted service providers that help us operate our business, including:

  • Google Workspace services, including Gmail, Google Drive, and Google Docs
  • Formspree (processing contact form submissions and delivering messages to us)
  • Professional advisers such as accountants, lawyers, or auditors
  • Public authorities where required by law

These providers process personal data only as necessary to provide their services.

International Transfers

Some of our service providers may process data outside the EEA, including in the United States.

In particular, we use services provided by Google (including Google Workspace) and Formspree, which may involve international data transfers.

Where such transfers occur, we rely on appropriate safeguards recognized under the GDPR, including adequacy decisions or Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy.

Typical retention periods:

  • Contact requests: up to 3 years after the last communication
  • Client and project records: for the duration of the relationship and as required by law
  • Accounting records: as required by applicable accounting and tax legislation

Your Rights

Subject to applicable law, you have the right to:

  • Access your personal data
  • Correct inaccurate personal data
  • Request deletion of personal data
  • Restrict processing
  • Object to processing based on legitimate interests
  • Receive your personal data in a portable format where applicable
  • Withdraw consent where processing is based on consent

To exercise your rights, contact us using the details above.

You also have the right to lodge a complaint with the competent data protection authority, including the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Cookies

This website uses only strictly necessary cookies for consent management through our cookie consent tool.

No analytics, advertising, or tracking cookies are used.

You can manage your cookie preferences at any time through the Cookie Preferences link in the footer.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page.