1. Data Controller

The controller responsible for your personal data collected through this website is:

Company Mahu Linnutee OÜ

Reg. nr. 17182206

Address Liivaoja tn 1d-50, Kesklinna linnaosa, 10155 Tallinn, Harju maakond, Estonia

Email slowlivingmahu@gmail.com

For any questions regarding the processing of your personal data, please contact us at slowlivingmahu@gmail.com.

2. Personal Data We Collect

2.1 Enquiry form

When you submit an enquiry through our website, we collect the following data you voluntarily provide:

2.2 Analytics data (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors use our website, but only if you accept statistics cookies in the cookie banner. If you decline, Google Analytics is not loaded and no analytics data is sent to Google. You can change your choice at any time via "Cookie settings" in the footer of the website. GA4 collects aggregated data such as:

Google Analytics 4 does not log or store individual IP addresses. We use the reports only in aggregated form and do not use Google Analytics to identify you personally.

2.3 Cookies and local storage

This website does not set any cookies of its own. The only cookies are the two Google Analytics statistics cookies below, and they are set only after you accept statistics cookies. If you withdraw your consent, they are deleted.

Cookie Purpose Duration Type
_ga Google Analytics — distinguishes visitors using a random ID 2 years Statistics (consent)
_ga_553EC8758B Google Analytics — keeps session state 2 years Statistics (consent)

In addition, the website stores your cookie choice and its date in your browser's local storage (cookieConsent; not a cookie, and never sent to us or to third parties), so we do not ask you again on every visit. This is necessary for the website to work as you requested. We ask for your choice again after 12 months.

3. Legal Basis for Processing

Processing activity Legal basis (GDPR Art. 6)
Responding to your enquiry / arranging a private visit Art. 6(1)(b) — necessary for pre-contractual steps at your request
Website analytics (GA4, statistics cookies) Art. 6(1)(a) — your consent, given in the cookie banner and withdrawable at any time
Protecting the enquiry form from spam and abuse (Cloudflare Turnstile) Art. 6(1)(f) — legitimate interest in keeping the form secure
Sending you further information about the project (if you consent) Art. 6(1)(a) — your consent

4. How We Use Your Data

We use the personal data you submit via the enquiry form exclusively to:

We do not use your data for automated decision-making or profiling. We do not sell or rent your personal data to any third party.

5. Data Retention

Enquiry data is retained for up to 3 years from the date of your enquiry, or until you request deletion — whichever comes first. After this period, your data is permanently deleted.

Analytics data (GA4) is retained for a maximum of 14 months, after which it is automatically deleted.

6. Third-Party Processors

We share data with the following trusted third-party service providers who act as data processors under GDPR:

Provider Service Location Safeguard
Google LLC Google Analytics 4 (only if you accept statistics cookies) USA (EU data centres where possible) Standard Contractual Clauses
Google LLC Gmail — receiving and storing the emails generated by the enquiry form USA / EU Standard Contractual Clauses
Vercel Inc. Website hosting and delivery (technical server logs, including IP address) USA (servers worldwide) Data processing agreement + Standard Contractual Clauses
Cloudflare, Inc. Turnstile spam protection on the enquiry form (loaded only when you reach the form) USA (servers worldwide) Data processing agreement + Standard Contractual Clauses
Resend Sending the enquiry form submission to us by email, and the confirmation email to you EU (Ireland); provider based in the USA Data processing agreement + Standard Contractual Clauses

Google's privacy policy is available at policies.google.com/privacy.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act, you have the following rights:

To exercise any of these rights, contact us at slowlivingmahu@gmail.com. We will respond within 30 days.

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our website is served over HTTPS.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will always indicate when the policy was last revised. We encourage you to review this page periodically.

10. Contact

All privacy-related enquiries should be directed to:

Company Mahu Linnutee OÜ

Email slowlivingmahu@gmail.com

Address Liivaoja tn 1d-50, 10155 Tallinn, Estonia