Privacy Policy

1. Introduction

MINDTITAN OÜ ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

This policy is designed to comply with the European Union General Data Protection Regulation (GDPR), Estonian Personal Data Protection Act, and other applicable privacy laws.

2. Data Controller Information

3. Information We Collect

3.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name
• Communication Data: Messages, inquiries, and correspondence you send to us
• Project Information: Details about your project requirements, budget, timeline
• Professional Information: Industry, role, business needs

3.2 Information Collected Automatically

• Website Usage Data: Pages visited, time spent, navigation patterns
• Technical Information: IP address, browser type, device information
• Cookies and Tracking Data: As described in our Cookie Policy
• Log Files: Server logs, error reports, security events

3.3 Information from Third Parties

• Publicly available business information
• Professional network profiles (with your consent)
• Referral information from partners or clients

4. How We Use Your Information

4.1 Legal Bases for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: To fulfill our contractual obligations with you
• Legitimate Interests: For business development, marketing, and service improvement
• Legal Compliance: To comply with applicable laws and regulations

4.2 Purposes of Processing

• Responding to inquiries and providing customer support
• Delivering our AI, software development, and consulting services
• Managing client relationships and project communications
• Processing payments and maintaining financial records
• Improving our website and services
• Marketing and business development (with consent)
• Compliance with legal and regulatory requirements

5. Data Sharing and Disclosure

5.1 We may share your information with:

• Service Providers: Trusted third parties who assist in our operations
• Professional Partners: Collaborators on specific projects (with your consent)
• Legal Authorities: When required by law or to protect our rights
• Business Successors: In case of merger, acquisition, or business transfer

5.2 International Transfers

We may transfer your data to countries outside the European Economic Area (EEA). When we do, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules or certification schemes

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access, use, or disclosure
• Accidental loss, destruction, or damage
• Unlawful processing or alteration

Our security measures include encryption, access controls, regular security assessments, and staff training on data protection.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:

• Contact inquiries: 3 years from last contact
• Client project data: 7 years after project completion
• Financial records: 7 years as required by Estonian law
• Marketing communications: Until you withdraw consent

8. Your Rights Under GDPR

As a data subject, you have the following rights:

8.1 Right of Access

You can request information about the personal data we process about you.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You can request limitation of processing in specific situations.

8.5 Right to Data Portability

You can request your data in a structured, machine-readable format.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Phone: +372 56688239
• Written request to our office address

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your website experience. For detailed information about our use of cookies, please see our Cookie Policy.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for significant changes

12. Complaints and Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with:

13. Contact Information

If you have questions about this Privacy Policy or our data processing practices, please contact us: