Who processes your data
The controller of your personal data is EstRagMG OÜ (registry code 17481724), Pikaliiva tn 92-9, 13516 Tallinn, Estonia. For any question about your data, email [email protected] or call +372 5556 6890.
What data we collect
- From the enquiry form: company name, your name, email, optionally phone and destination country, product, quantity and your message.
- From emails and calls: contact details and whatever you tell us, including drawings and photos.
- Technical data: IP address, browser type and time of request, logged by our hosting provider to keep the site running and secure.
Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|
| Replying to your enquiry and preparing a quotation | (b) steps taken at your request before entering into a contract; for company representatives also (f) legitimate interest in business correspondence |
| Concluding and performing a supply contract | (b) performance of a contract |
| Accounting and tax obligations | (c) legal obligation |
| Protecting the website against spam and attacks | (f) legitimate interest |
| Website visit statistics (Google Analytics) | (a) your consent |
How long we keep data
- Enquiries that do not lead to an order — up to 12 months after the last contact.
- Correspondence and documents relating to a contract — for the term of the contract and until the limitation period expires.
- Accounting source documents — 7 years, as required by the Estonian Accounting Act.
- Technical logs — for the period set by the hosting provider.
- Google Analytics data — 14 months, then deleted automatically.
Who we share data with
We do not sell personal data or share it for advertising. Only those who need the data have access to it:
- EstRagMG staff who reply to your enquiry and fulfil your order;
- processors under a data processing agreement: website hosting (Cloudflare), the service that sends enquiry form emails (Resend), email service, accounting service;
- Google Ireland Limited (Google Analytics) — website visit statistics, only with your consent;
- carriers — only the delivery address and contact person;
- public authorities — where required by law.
Transfers outside the EU
Some service providers, such as Cloudflare, Resend and Google, may process data outside the European Economic Area. Such transfers rely on a European Commission adequacy decision (EU–US Data Privacy Framework) or on EU standard contractual clauses.
Cookies
Google Analytics 4 cookies (_ga and _ga_*) are stored only if you click “Accept” in the cookie banner. They show us how many people visit the website, which pages they open and where they come from. We do not use advertising cookies; Google Analytics advertising features and Google Signals are turned off.
Legal basis: your consent (Art. 6(1)(a) GDPR). Google Analytics does not store full IP addresses. The data is kept for 14 months. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page: analytics is switched off and its cookies are deleted.
Your choice is stored in your browser (localStorage) so that the banner does not appear again. Without your consent, Google Analytics is not loaded.
The enquiry form is protected from spam by Cloudflare Turnstile. It loads only when you start filling in the form. It checks technical data from your browser and device, including your IP address, to tell humans from bots. This data is not used for advertising or tracking. Legal basis: our legitimate interest in protecting the website (Art. 6(1)(f) GDPR).
Your rights
You have the right to:
- access the data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased where we are not required to keep it;
- restrict processing or object to processing based on legitimate interest;
- receive your data in a machine-readable format (data portability).
Email [email protected] and we will reply within one month. If you believe your rights have been infringed, you can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
Changes to this policy
The current version is always published on this page; the date of the last update is shown at the top.