Privacy Policy – CONTORO

Privacy at a glance

This website only processes the data that is technically required to operate it. No cookies are set, and there is no tracking or audience measurement. No third-party widgets (social media plugins, video embeds, analytics) are embedded. Fonts are served locally.

Controller

The controller responsible for data processing on this website is:

CONTORO SOLUTIONS OÜ
Sakala tn 7-2
10141 Tallinn
Estonia

Phone: +372 5762 2586
Email: info@contoro.solutions

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses).

Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers located in the European Union. Deployment is handled via the open-source platform Coolify, running on a Hetzner server we manage.

Legal basis is Art. 6(1)(f) GDPR (legitimate interest in the reliable provision of the website). A data processing agreement (DPA) is in place with Hetzner.

Server log files

When the website is accessed, the host (Hetzner) automatically records technical information in server log files that your browser transmits:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other sources. The collection is based on Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and optimisation of the website).

Cookies and tracking

This website does not set any cookies. There is no tracking and no audience measurement. No analytics services (e.g. Google Analytics, Matomo, Plausible) and no advertising pixels (e.g. Facebook Pixel, LinkedIn Insight Tag) are used. LocalStorage, SessionStorage or other client-side storage is not used.

Fonts (Montserrat)

Fonts (Montserrat) are served locally from our own server to provide a uniform presentation. No connection to third-party servers (e.g. Google Fonts) is established. No font data is transmitted to external providers when the page is loaded.

Appointment booking (external service)

In the contact section, this website links to the external service Cal.com (Cal.com, Inc., 2261 Market Street #5211, San Francisco, CA 94114, USA). Cal.com is not embedded. Only a link is provided. Only if you follow the link do you leave this website and reach the Cal.com domain, where their privacy terms and any cookies they may set apply.

Cal.com privacy policy: https://cal.com/privacy.

Encryption (SSL/TLS)

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar begins with "https://" and by the lock symbol in your browser line. Data you transmit to this website is thus protected from third-party access.

General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Data transmission on the Internet (e.g. when communicating by email) may have security gaps; complete protection against third-party access is not possible.

Storage duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible grounds for storage (e.g. retention periods under tax or commercial law).

Legal bases for processing

Processing of your data is based, depending on context, on consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), or our legitimate interest (Art. 6(1)(f) GDPR).

Rights of the data subject

You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data, to restrict processing, and to data portability. You can revoke any consent you have given at any time with effect for the future.

You have the right to object to processing if it is based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).

You can contact us at any time regarding questions on data protection.

Right to lodge a complaint with the supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for data protection matters is:

Andmekaitse Inspektsioon (Estonian Data Protection Authority)
Tatari 39
10134 Tallinn, Estonia
Phone: +372 627 4135
Email: info@aki.ee
Website: https://www.aki.ee

Objection to advertising emails

We hereby object to the use of contact data published in the context of the imprint obligation for the purpose of sending advertising and information material that has not been expressly requested. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, e.g. spam emails.

Last updated: May 2026