Privacy Policy

This Privacy Policy describes how doriaflow (doriaflow Osaühing) collects, uses, and protects your personal information when you visit our website and use our services. We are committed to protecting your privacy and handling your data responsibly and transparently.

Who We Are

We operate a website dedicated to doriaflow cabin building, maintenance, and wood stove care guidance. We provide resources, guides, and information about barrel doriaflow kit assembly and backyard doriaflow maintenance in the Tartu area and beyond. As the data controller, we are responsible for how your personal information is collected, used, and stored.

Information We Collect

We collect personal information in several ways:

• Contact Form Data: When you submit inquiries or messages through our contact form, we collect your name, email address, phone number, and message content.
• Website Usage Data: We collect information about how you interact with our website, including pages visited, time spent, and navigation patterns through analytics tools.
• Cookies and Tracking: We use cookies to enhance your browsing experience and understand user preferences. This includes both essential cookies for functionality and analytical cookies for performance monitoring.
• Device Information: We may collect information about your device, browser type, operating system, and IP address for security and analytical purposes.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: For non-essential cookies and marketing communications, we rely on your explicit consent.
• Legitimate Interest: We process data to improve our website functionality, provide better service, and understand user needs without compromising your rights.
• Legal Obligation: We may process data to comply with applicable laws, regulations, and legal requests from authorities.
• Contract Performance: When you request services or information, we process data necessary to fulfill your request.

How We Use Your Information

We use the information we collect for specific purposes:

• Responding to your inquiries and providing requested information about doriaflow maintenance and cabin building.
• Improving our website content, design, and user experience based on usage patterns and feedback.
• Analyzing website performance and visitor behavior to enhance service quality.
• Ensuring website security and preventing fraudulent activities.
• Sending informational updates or newsletters (only with your consent).
• Complying with legal obligations and protecting our rights and those of our users.

Data Retention

We retain your personal information for specific periods based on the purpose of collection:

• Contact Form Messages: We retain contact form submissions for up to 24 months after your last interaction to maintain communication history and respond to follow-up inquiries.
• Analytics and Usage Data: Website analytics data and cookies are retained for up to 12 months to analyze trends and user behavior patterns.
• Server Logs: Technical server logs containing IP addresses and access information are retained for up to 12 months for security and troubleshooting purposes.
• Email Communications: Correspondence and email exchanges are retained for up to 24 months or as required by applicable law.

After these periods, we securely delete or anonymize your personal information unless legal obligations require longer retention.

Your Rights

Under data protection laws, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request corrections to inaccurate or incomplete personal information.
• Right to Erasure: You can request deletion of your personal information under certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used format and transfer it to another service provider.
• Right to Object: You can object to certain types of data processing, including marketing communications.
• Right to Withdraw Consent: You can withdraw consent for cookie use or marketing communications at any time.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us remember your preferences and track website usage. We use both essential cookies (required for website functionality) and analytical cookies (to understand user behavior and improve our services). For detailed information about cookie types and your cookie preferences, please refer to our separate Cookie Policy. You can control cookie settings through your browser, though disabling essential cookies may affect website functionality.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include secure data encryption, access controls, and regular security assessments. However, no method of data transmission over the internet is entirely secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and protect your account information.

Third-Party Links

Our website may contain links to external websites and resources related to doriaflow building and maintenance. We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy policies of any external sites before providing your personal information. This Privacy Policy applies only to our website and services.

Children's Privacy

Our website is not directed to individuals under 16 years of age, and we do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 16, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided information to us should contact us immediately.

International Data Transfers

Your personal information is primarily stored and processed within the European Union. If we transfer data outside the EU/EEA region, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your data with adequate privacy standards equivalent to EU regulations.

Supervisory Authority

You have the right to lodge a complaint with the data protection authority if you believe we have violated your rights. The competent authority in Estonia is the Data Protection Inspectorate (Andmekaitse Inspektsioon). You can contact them at their official website or office to file a formal complaint regarding our data processing practices.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page. Your continued use of our website following any changes constitutes your acceptance of the updated Privacy Policy.