Privacy Policy

1. Introduction

OÜ Hansab IT Solutions ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

This policy complies with the General Data Protection Regulation (GDPR) and Estonian data protection laws.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number, postal address)
• Company information (company name, position, business address)
• Communication records (emails, phone calls, meeting notes)
• Project-related information and requirements
• Payment and billing information

2.2 Technical Information

When you visit our website, we automatically collect:

• IP address and browser information
• Device information and operating system
• Pages visited and time spent on our website
• Referring website information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing our IT services and software development solutions
• Communicating with you about our services and your projects
• Processing payments and managing billing
• Improving our website and services
• Complying with legal obligations
• Marketing our services (only with your consent)
• Analyzing website usage and performance

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To fulfill our contractual obligations when providing services
• Legitimate Interest: To improve our services and website functionality
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With trusted service providers who assist in our business operations
• When required by law or to protect our legal rights
• In connection with a business transaction (merger, acquisition, etc.)
• With your explicit consent

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure backup and recovery procedures

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Generally:

• Customer data: Retained for the duration of our business relationship plus 7 years for legal and tax purposes
• Website analytics data: Retained for up to 2 years
• Marketing data: Retained until you withdraw consent

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right of Rectification: Correct inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing at any time

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Ensure proper website functionality
• Analyze website traffic and usage patterns
• Remember your preferences and settings
• Provide personalized content and advertisements

You can manage your cookie preferences through our cookie consent banner or your browser settings. For more information, please see our Cookie Policy.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by law

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you of significant changes via email or website notice
• Obtain your consent for material changes that affect your rights

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Data Protection Authority

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate: