Veebikujundus Stuudio

Privacy Policy

Effective from: 01.01.2025. Last updated: 31.10.2026.

1. General provisions

This Privacy Policy describes how CodeGrid OÜ collects, uses, stores, and protects personal data when you visit our website or use our services.

Data controller:
CodeGrid OÜ
Registry code: 17430963
VAT number: EE102952386
Email: info@kujundusstuudio.ee

2. What data we collect

2.1 Data you provide to us

  • Name, email address, and phone number submitted through the contact form
  • Company name and other information you choose to provide voluntarily
  • The content of correspondence between us and you

2.2 Data collected automatically

  • Technical request data for server security and operation
  • Without consent, a short-lived pseudonymous session path within one browser tab, without analytics cookies or a persistent visitor ID
  • With consent, a more persistent pseudonymous visitor ID, sessions, page usage, form outcomes, coupon-code and partner-link events
  • With consent, general browser and device type, operating system, language, screen dimensions, referring domain and campaign parameters
  • Cookies and similar technologies, see our Cookie Policy.

3. Purposes and legal basis of processing

We process your personal data for the following purposes:

  • Providing services – responding to your inquiries and delivering projects, legal basis: performance of a contract
  • Communication – responding to messages sent through the contact form, legal basis: legitimate interest
  • Website improvement – understanding website performance with short-lived pseudonymous session analytics and aggregate metrics, and with consent more detailed analytics about sessions and visits; legal basis: legitimate interest for cookie-free session analytics without consent and consent for analytics cookies
  • Compliance with legal obligations – accounting obligations and other requirements arising from law, legal basis: legal obligation
  • Offers to businesses – short emails about our services sent to the address a company has listed in the Business Register, legal basis: legitimate interest (see section 4)

4. Offers to businesses

We send short emails to businesses about our services, for example about a website, an online store or growing online sales. This section explains where that data comes from and how we use it.

  • Source of the data: open data of the Estonian Business Register and the Tax and Customs Board: company name, registry code, field of activity, location, the email address and website listed in the Business Register, and public turnover and headcount figures.
  • Personal data: if the address listed in the Business Register contains a person's name or is their personal mailbox, we treat it as personal data. We do not collect any other data about the person for this purpose.
  • Looking at the website: we may look at the company's public website so that the email fits the company's situation, for example whether it has an online store. If no website is listed in the Business Register, we may look for it by the company name, including through a search engine. No personal data is collected from the website.
  • Purpose and legal basis: sending offers to businesses. The legal basis is our legitimate interest in offering our services to businesses (Article 6(1)(f) of the General Data Protection Regulation). Section 103¹ of the Estonian Electronic Communications Act allows offers to be sent to a legal person's email address if every email gives a simple, free way to opt out.
  • Opting out and objecting: every email contains a link to stop further offers, and you can also opt out by replying. After that we do not send offers to that company or address again. You have the right to object to the use of your data for direct marketing at any time, and after that we no longer use it for that purpose.
  • Retention: we keep sending and correspondence data for as long as needed to avoid writing to the same company again and to honour opt-outs. An address that opted out stays on our do not contact list so that we never use it again.
  • Sharing: the data is not sold or passed on. Emails are sent through our email service provider (section 6). When we search for a company's website, the search service only receives the company name.

5. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form data for up to 2 years after the last communication
  • Contractual data for 7 years in accordance with accounting legislation
  • Analytics data for up to 1 year
  • Data about offers sent to businesses for as long as needed to avoid writing to the same company again and to honour opt-outs. An address that opted out stays on our do not contact list.

6. Data sharing

We do not sell or rent your personal data to third parties. Data may only be shared with:

  • Authorized processors who provide services to us, such as web hosting and email service providers
  • Competent public authorities where required by law

All authorized processors are required to ensure the confidentiality and security of the data.

7. Your rights

Under the General Data Protection Regulation, you have the following rights:

  • Right of access – to receive confirmation whether your data is being processed and request a copy
  • Right to rectification – to request correction of inaccurate data
  • Right to erasure – to request deletion of data where there is no legal basis for processing
  • Right to restriction of processing – to request restriction of processing under certain conditions
  • Right to data portability – to receive your data in a structured format
  • Right to object – to object to processing based on legitimate interest
  • Right to withdraw consent – where processing is based on consent, you have the right to withdraw it at any time

To exercise your rights, please send us an email at info@kujundusstuudio.ee. We will respond to your request within 30 days at the latest.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

8. Data security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses SSL or TLS encryption to ensure secure data transmission.

9. Cookies

Our website uses cookies. You can find detailed information about the use of cookies in our Cookie Policy.

10. Changes to this Privacy Policy

We may update this Privacy Policy at any time. In the event of significant changes, we will notify you through the website. We recommend reviewing this Privacy Policy regularly.

11. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:

CodeGrid OÜ
Email: info@kujundusstuudio.ee