Privacy Policy

We keep it simple by design. 100% EU hosted, no logs, no cookies, no personal data collected - unless you actively contact us via the contact form.

Introduction

This Privacy Policy explains how we process personal data in connection with the website eualternative.eu, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the EU ePrivacy Directive (2002/58/EC).

We have designed this website to collect as little personal data as possible. We do not sell personal data, we do not use advertising trackers, and we do not transfer personal data outside the European Union.

Controller

The controller responsible for the processing of personal data on this website is:

Nineties Engineering OÜ
Sepapaja 6
15551 Tallinn
Estonia
Email: privacy@eualternative.eu

Personal Data We Process

We only process personal data that is strictly necessary to operate this website:

• Contact form submissions: if you contact us through the contact form, we process the name and email address you provide, together with the content of your message. Your name and email address are only linked to each other if you choose to submit them via the contact form.
• Anonymous usage statistics: aggregated, anonymous information about page visits collected through Plausible Analytics (see "Web Analytics" below). This data does not allow us to identify individual visitors.
• Server logs: our servers are configured to not log any information.

Purposes and Legal Bases

We process personal data on the following legal bases under Article 6(1) GDPR:

• Replying to contact form messages — Article 6(1)(b) GDPR (steps prior to entering into a contract) or Article 6(1)(f) GDPR (our legitimate interest in answering enquiries).
• Operating and securing the website (including server logs and spam protection on the contact form) — Article 6(1)(f) GDPR (our legitimate interest in providing a secure and functional website).
• Anonymous usage statistics — Article 6(1)(f) GDPR (our legitimate interest in understanding aggregate usage). Because the analytics tool we use does not process personal data, no consent is required under the ePrivacy Directive.

Cookies

This website does not use tracking cookies, advertising cookies, or analytics cookies.

The only cookies that may be set are strictly necessary cookies on the contact form, used solely to help protect the form against spam and abuse. These cookies are required for the contact form to function and do not require consent under Article 5(3) of the ePrivacy Directive.

Analytics

We use Plausible Analytics, a GDPR- and ePrivacy-compliant tool that does not use cookies and does not collect IP addresses. We do not use Google Analytics.

Hosting and Data Location

This website is hosted exclusively on servers located within the European Union. Personal data processed in connection with this website is not transferred to third countries outside the EU/EEA.

Retention

We keep personal data only for as long as necessary for the purpose for which it was collected:

• Contact form messages are kept for as long as needed to handle your enquiry and any related follow-up, and then deleted.
• Plausible Analytics data is aggregated and anonymous and is not linked to individual visitors.

Your Rights under the GDPR

If we process personal data about you, you have the right to:

• Access your personal data (Article 15 GDPR)
• Have inaccurate data corrected (Article 16 GDPR)
• Have your personal data erased (Article 17 GDPR)
• Restrict the processing of your personal data (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing based on legitimate interests (Article 21 GDPR)
• Withdraw consent at any time, where processing is based on consent (Article 7(3) GDPR), without affecting the lawfulness of processing prior to withdrawal

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement (Article 77 GDPR). The competent supervisory authority for the controller is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 32 GDPR.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the website or to legal requirements. The current version is always available on this page.

Contact

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us or email us at privacy@eualternative.eu.

You may also contact us by post: Nineties Engineering OÜ, Sepapaja 6, 15551 Tallinn, Estonia.