Privacy policy

Who we are

GÜNES CONSULTING OÜ, a private limited company registered in Estonia, is the controller of the personal data described here. Our company details are on the Legal page. For anything about this policy or your personal data, write to support@gunes.ee.

What we collect, and why

When you contact us

The contact form sends us your company, your name, your email address and your message. It is delivered by Formspree, which passes it on to us by email and keeps a copy in our Formspree account, where only the most recent messages are kept. We use it to answer you and, if you ask, to prepare an offer. Legal basis: steps you ask us to take before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in answering you (Article 6(1)(f)).

Visit statistics — only if you accept

If you accept cookies in the banner, this website loads Google Analytics. It sets cookies and sends Google information about your visit: the pages you view, the page you came from, your device and browser, and your approximate location, which Google derives from your IP address. We see only totals. If you decline, or make no choice, nothing is sent to Google. Legal basis: your consent (Article 6(1)(a)). You can withdraw it at any time through "Cookie settings" at the foot of every page; withdrawing removes Google Analytics' cookies from your browser.

Hosting

Our hosting provider, Vercel, receives your IP address to deliver each page, and keeps technical logs for a limited period set by its service, to run and protect it. Legal basis: our legitimate interest in running a secure website. The website's fonts are served from this website itself.

Cookies

This website sets cookies only if you accept them: Google Analytics' cookies, which tell visits and visitors apart and last up to 2 years. Your answer to the banner is kept in your browser's storage, not in a cookie, until you change it or clear your browser's storage.

Who else handles your data

• Vercel hosts this website.
• Formspree delivers the contact form.
• Google provides the visit statistics — only if you accept them.

All three are based in, or belong to groups based in, the United States, so your data may be processed there. Any such transfer is made only under a mechanism recognised by Chapter V GDPR, such as an adequacy decision (including the EU–US Data Privacy Framework, for certified recipients) or the European Commission's standard contractual clauses.

We do not sell personal data to anyone.

How long we keep it

• Messages you send us: for as long as we need them to deal with your enquiry and any work that follows from it.
• Formspree's copy of a message: until newer messages replace it in our Formspree account, or we delete it.
• Visit statistics, if you accepted them: Google keeps data about individual visits for the period set in our Google Analytics account, at most 14 months.
• Hosting logs: a limited period set by our hosting provider's service.

Your rights

Under the GDPR, you have the right to access your personal data and receive a copy of it, to have it corrected or erased, to restrict its processing, to object to processing based on our legitimate interests, and to receive it in a portable format. To use these rights, write to support@gunes.ee. We answer within one month.

You can also complain to a data protection authority: in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority in the EU country where you live or work.

Changes to this policy

We may update this policy. The version number and date at the top show which version applies.