Who is responsible
The data controller is ArborIT OÜ (registry code 11937796). I, Raul Juurma, run the company and answer your messages myself. Contact: info@arborit.eu.
What data I collect
I only receive data that you enter yourself or that arises from using the site:
- From the contact, analysis and order forms: your name, email address, message and chosen topic; on the order form, your phone number if you choose to give it, and on the analysis form, the address of the site to be analysed.
- When you send a form, the time of sending and your IP address are added to the message so I can recognise spam and abuse.
- Emails you send directly to info@arborit.eu.
- Web analytics (Google Analytics) data, only if you have accepted it in the cookie banner: pages visited, approximate location, device and browser.
What I use it for and on what basis
I do not sell data, use it for advertising or make automated decisions based on it.
- To answer your enquiry and prepare a quote — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
- To keep out spam and abuse — my legitimate interest (Art. 6(1)(f)).
- For web analytics — your consent (Art. 6(1)(a)), which you can withdraw at any time.
Cookies
The site itself does not set cookies. Your cookie choice is saved in your browser's local storage (key arborit_cookie) so the banner does not reappear on every page.
If you choose “Accept”, Google Analytics switches on and sets the cookies _ga and _ga_*. If you choose “Essential only”, analytics stays disabled and stores no cookies. To change your choice, clear this site's stored data in your browser — the banner will appear again.
Who the data is shared with
Only service providers without whom the site would not work have access to the data:
- the web hosting provider whose server runs the site and sends the form emails;
- Cloudflare, which delivers and protects the site's traffic (processes IP addresses);
- the email provider that runs the info@arborit.eu mailbox;
- Google (Google Analytics) — only with your consent. Google may also process data outside the European Union; this is done under the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.
How long I keep the data
- I keep enquiries and correspondence for as long as needed to reply and to perform any resulting contract, and after that for as long as the law requires (for example, accounting records for 7 years).
- The spam protection keeps a hash of your IP address (not the address itself) for up to 1 hour.
- Google Analytics data is kept for up to 14 months.
Your rights
You have the right to ask what data I hold about you, to have it corrected or erased, to restrict its use, to object, and to receive your data in a machine-readable format. You can withdraw your consent at any time.
Write to info@arborit.eu — I will reply within one month at the latest. If you believe I am violating your rights, you can contact the Estonian Data Protection Inspectorate (www.aki.ee).