// Privacy, cookies & GDPR

Legal notice

Last updated — March 2026

1. Company Information

765 Digital OÜ
Company Registration Number: 16939989
Address: Järvevana tee 9, 11314, Tallinn, Estonia
Email: contact@765digital.com

Data Protection Officer Contact: contact@765digital.com

2. Data Controller

765 Digital OÜ is the data controller for all personal data collected through this website, in accordance with the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

3. Data We Collect

3.1 Contact Form Data

When you submit our contact form, we collect the following information:

Name
Email address
Phone number (if provided)
Company name (if provided)
Message content
IP address (for security purposes)
Date and time of submission

3.2 Cookies (Cookie Policy)

3.2.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help us provide core functionality, improve performance, and analyse how visitors interact with our site. Some cookies are essential for the site to function, while others are used only with your consent.

3.2.2 Types of Cookies We Use

Necessary cookies

_cfuvid (set by Cloudflare): Helps maintain session consistency, improve security, and optimise performance. Does not store personally identifiable information and expires when your browsing session ends.

Analytics cookies

_ga (set by Google Analytics): Used to distinguish users and calculate visitor, session, and campaign data. Stores a randomly generated identifier and expires after approximately one year and one month.
_ga_* (set by Google Analytics): Works together with the main _ga cookie to store and count page views. Same expiration period of around one year and one month.

Advertising cookies

_gcl_au (set by Google Tag Manager for Google Ads): Used to measure the efficiency of advertising campaigns and track conversions. Typically expires after three months.
_gcl_ls (set by Google Ads): Used for conversion tracking and attribution. Persistent cookie — does not automatically expire.

Other cookies

visited: Used to record whether a visitor has previously accessed the website. Expires when your browsing session ends.

3.2.3 How We Use Cookies

Necessary cookies enable essential functionality such as security and session management.
Analytics cookies (Google Analytics) help us understand website traffic and improve usability.
Advertising cookies (Google Ads) allow us to measure campaign effectiveness and display more relevant ads.

Analytics and advertising cookies are non-essential and are used only with your consent. You can manage or withdraw your consent at any time through our cookie banner or your browser settings.

3.2.4 Third-Party Cookies and Data Transfers

Cookies set by Google Analytics and Google Ads may result in data being transmitted to Google LLC servers in the United States or other countries outside the EU/EEA. Google acts as our data processor under the Google Data Processing Terms. For details on how Google handles data, see Google's Privacy Policy.

3.2.5 Managing Cookies

You can control and manage cookie preferences in the following ways:

Adjust your preferences in our cookie consent banner.
Configure or delete cookies via your browser settings.
Opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

4. Legal Basis for Processing

We process personal data under the following legal bases:

Legitimate Interest (Article 6(1)(f) GDPR): For ensuring the security and proper functioning of our website, preventing spam and abuse, and maintaining basic analytics within server logs (which do not use tracking cookies).
Contract (Article 6(1)(b) GDPR): To fulfil contractual obligations with our clients, including communication, project delivery, and invoicing.
Consent (Article 6(1)(a) GDPR): Where you have explicitly given consent, such as for:
- The use of cookies and similar technologies for Google Analytics and Google Ads, including tracking and measurement via Google Tag Manager.
- Receiving marketing communications or participating in optional surveys or promotions. You can withdraw your consent at any time via our cookie banner or by adjusting your browser settings.

5. Purpose of Data Processing

We use your data to:

Respond to your inquiries and contact requests
Provide web development services
Maintain client relationships
Prevent spam and ensure website security
Comply with legal obligations

6. Data Retention

Contact form submissions: Retained for 3 years from last contact or until you request deletion.
Client project data: Retained for 7 years as required by Estonian accounting laws.
Server logs: Automatically deleted after 30 days.
Cookies: Retained for the durations listed in Section 3.2.2 or until you delete them or withdraw consent.

7. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only:

With trusted service providers (hosting, email services) under strict data processing agreements.
When required by law or legal proceedings.
With your explicit consent.

7.1 International Transfers

Our website may be hosted on servers located outside the EU. All transfers are protected by:

Adequacy decisions where applicable.
Standard Contractual Clauses (SCCs).
Other appropriate safeguards as required by the GDPR.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access (Article 15): Request copies of your personal data.
Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing (Article 18): Request limitation of how we process your data.
Right to Data Portability (Article 20): Request transfer of your data in a structured format.
Right to Object (Article 21): Object to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at contact@765digital.com.

9. Cookies and Tracking

Analytics and advertising cookies are only used after you provide consent through our cookie banner. We do not use social media tracking plugins or other third-party advertising networks beyond those listed in this notice.

10. Security Measures

We implement appropriate technical and organisational measures to protect your data, including:

SSL/TLS encryption for data transmission.
Secure server configurations.
Regular security updates.
Access controls and authentication.
Data minimisation practices.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16.

12. Complaints

You have the right to lodge a complaint with a supervisory authority:

Estonia: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
- Website: https://aki.ee
- Email: info@aki.ee

For EU residents, you may also contact your local data protection authority.

13. Changes to This Notice

This notice may be modified or supplemented at any time. Users are invited to consult it regularly. Continued use of our website constitutes acceptance of any changes.

14. Applicable Law

This notice is governed by Estonian law and the GDPR. Any disputes will be resolved in Estonian courts, unless otherwise required by applicable consumer protection laws.

15. Contact Information

For any questions about this notice or our data practices, please contact:

Email: contact@765digital.com