Privacy Policy

Introduction

This Privacy Policy explains how we process personal data in connection with the website eualternative.eu, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the EU ePrivacy Directive (2002/58/EC).

We have designed this website to collect as little personal data as possible. We do not sell personal data, we do not use advertising trackers, and we do not transfer personal data outside the European Union.

Controller

The controller responsible for the processing of personal data on this website is:

Nineties Engineering OÜ
Sepapaja 6
15551 Tallinn
Estonia
Email: privacy@eualternative.eu

Personal Data We Process

We only process personal data that is strictly necessary to operate this website:

• Contact form submissions: if you contact us through the contact form, we process the name and email address you provide, together with the content of your message.
• Anonymous usage statistics: aggregated, anonymous information about page visits collected through Kindstats, a privacy-friendly, European web analytics service. This data does not allow us to identify individual visitors.
• Server logs: our servers are configured to not log any information.

Purposes and Legal Bases

We process personal data on the following legal bases under Article 6(1) GDPR:

• Replying to contact form messages — Article 6(1)(b) GDPR (steps prior to entering into a contract) or Article 6(1)(f) GDPR (our legitimate interest in answering enquiries).
• Operating and securing the website (including spam protection on the contact form) — Article 6(1)(f) GDPR (our legitimate interest in providing a secure and functional website).
• Anonymous usage statistics — Article 6(1)(f) GDPR (our legitimate interest in understanding aggregate usage). Because the analytics tool we use does not process personal data, no consent is required under the ePrivacy Directive.

Cookies

This website does not use tracking cookies, advertising cookies, or analytics cookies.

The only cookies that may be set are strictly necessary cookies on the contact form, used solely to help protect the form against spam and abuse. These cookies are required for the contact form to function and do not require consent under Article 5(3) of the ePrivacy Directive.

Analytics

We use Kindstats, a GDPR-compliant analytics tool that does not use cookies and does not collect IP addresses. We do not use Google Analytics.

Hosting and Data Location

This website is hosted exclusively on servers located within the European Union. Personal data processed in connection with this website is not transferred to third countries outside the EU/EEA.

Retention

We keep personal data only for as long as necessary for the purpose for which it was collected:

• Contact form messages are kept for as long as needed to handle your enquiry and any related follow-up, and then deleted.
• Kindstats analytics data is aggregated and anonymous and is not linked to individual visitors.

Your Rights under the GDPR

If we process personal data about you, you have the right to:

• Access your personal data (Article 15 GDPR)
• Have inaccurate data corrected (Article 16 GDPR)
• Have your personal data erased (Article 17 GDPR)
• Restrict the processing of your personal data (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing based on legitimate interests (Article 21 GDPR)
• Withdraw consent at any time, where processing is based on consent (Article 7(3) GDPR), without affecting the lawfulness of processing prior to withdrawal

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement (Article 77 GDPR). The competent supervisory authority for the controller is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 32 GDPR.

External Websites

This Privacy Policy covers EU Alternative. External websites linked from this site may have their own privacy policies and data processing practices. We are not responsible for the data protection practices of these external sites. We encourage you to review their privacy policies before providing personal data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the website or to legal requirements. The current version is always available on this page.

Contact

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us or email us at privacy@eualternative.eu.

You may also contact us by post at the controller address above. For general operator details, see our Legal Notice.