Privacy Policy

Information on the processing of personal data pursuant to Art. 13, 14 GDPR

1. Controller

The controller for data processing on this website is:

2. General information on data processing

We generally process our users' personal data only to the extent necessary to provide a functioning website and our content and services. Processing generally takes place only with consent (Art. 6 (1) (a) GDPR) or on the basis of the other statutory grounds (in particular Art. 6 (1) (b) and (f) GDPR).

3. Hosting and server log files

When you access this website, the hosting provider automatically collects and stores information in server log files that your browser transmits (including IP address, date/time, page accessed, amount of data transferred, referrer URL, browser type and operating system). The legal basis is Art. 6 (1) (f) GDPR (secure and stable operation).

4. Consent & cookie banner

Non-essential cookies and tracking technologies (in particular the analytics and marketing services listed under section 6) are only set or loaded after you have given consent via our consent banner (Art. 6 (1) (a) GDPR, § 25 (1) TTDSG). Your consent is voluntary and can be withdrawn at any time with effect for the future, e.g. via the cookie settings in the footer of this website.

5. Contact

If you contact us by email, we process your details solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR.

6. Services used (analytics, tag management & marketing)

The following services are used – to the extent that they set cookies or process personal data – only on the basis of your consent (Art. 6 (1) (a) GDPR). With several providers, data may be transferred to the USA (see section 7).

Appointment booking – cal.com

We use cal.com (Cal.com, Inc.) to arrange intro calls. Data entered when booking (name, email, preferred time) is processed to carry out the appointment. Legal basis: Art. 6 (1) (b) GDPR. Privacy information: cal.com/privacy.

Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager manages and loads further tags/scripts (e.g. Google Analytics). It does not itself create user profiles, but enables the delivery of the services below. Privacy: policies.google.com/privacy.

Google Analytics 4

Provider: Google Ireland Limited. Google Analytics 4 is used for reach analysis and evaluates your usage behaviour (including truncated IP address, pages visited, time spent, device) in a pseudonymised form. Legal basis: consent (Art. 6 (1) (a) GDPR). Privacy: policies.google.com/privacy.

Microsoft Clarity

Provider: Microsoft Ireland Operations Ltd., One Microsoft Place, Dublin 18, Ireland. Clarity creates anonymised session recordings and heatmaps (clicks, scrolling, mouse movements) to improve usability. Legal basis: consent (Art. 6 (1) (a) GDPR). Privacy: privacy.microsoft.com.

Meta Pixel (Facebook/Instagram)

Provider: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. The Meta Pixel enables the measurement of advertising success and remarketing via Facebook/Instagram. Legal basis: consent (Art. 6 (1) (a) GDPR). Privacy: facebook.com/privacy/policy.

LinkedIn Insight Tag

Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland. The Insight Tag is used for conversion tracking, retargeting and analytics on website visitors via LinkedIn. Legal basis: consent (Art. 6 (1) (a) GDPR). Privacy: linkedin.com/legal/privacy-policy.

Google Search Console & SemRush (SEO)

To analyse and optimise our visibility in search engines, we use Google Search Console (Google Ireland Limited) and SemRush (Semrush Inc.). These tools mainly evaluate aggregated search and ranking data not related to individual website visitors and do not set tracking cookies on this website. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in optimising our offering). Privacy: Google · SemRush.

7. Data transfer to third countries

With the services mentioned, personal data may be transferred to parent companies or servers in the USA. The transfer takes place on the basis of the EU Commission's standard contractual clauses (Art. 46 GDPR) and – where the provider is certified – the EU-US Data Privacy Framework. The USA may not offer a level of data protection comparable to the EU; access by US authorities cannot be entirely ruled out. Your consent also covers this data transfer (Art. 49 (1) (a) GDPR).

8. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7 (3) GDPR)

9. Right to lodge a complaint with a supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data. For Estonia, this is the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), www.aki.ee.

10. Status

This privacy policy is as of July 2026. Further development of the website or changes to legal requirements may make an update necessary.