Who is responsible?
The controller is SafonMarketing OÜ, registry code 17629914, Ida-Viru maakond, Kohtla-Järve linn, Järve linnaosa, Keskallee 25-7, 30321, Estonia. For privacy questions and requests: business@safonmarketing.info; telephone +372 5616 7063.
What data do we receive?
An enquiry contains your name, email address, message, project country and client type, plus the selected service and other project information. Organisation, phone, budget, timing and existing materials are optional. If you contact us by email or telephone, we use the contact details and relevant communication content you provide. This website does not record telephone calls.
To deliver and secure the connection, the hosting service may process your IP address, request time, requested address and technical browser or device information. We do not use this information to build advertising profiles.
Enquiries are voluntary. The required website fields help us identify you in the conversation, reply and assess conditions relating to project location and client type. You can alternatively email us directly. Please do not send passwords, payment-card details, health data or unnecessary information about other people.
Purposes and legal bases
When you ask for a quotation as an individual for yourself, we use the necessary data to take steps at your request before a contract (GDPR Article 6(1)(b)). For business representatives and other ordinary correspondence, our basis is a legitimate interest in communicating, preparing quotations and keeping relevant correspondence (Article 6(1)(f)).
Website security, preventing abuse and, where needed, protecting legal claims rely on our legitimate interests (Article 6(1)(f)). Compliance with legal obligations relies on Article 6(1)(c). Limited retention of an enquiry that does not become a contract supports continuity and proportionate record-keeping.
An enquiry does not subscribe you to a newsletter or consent to promotional emails. We do not sell enquiry data or use it for solely automated decisions with legal or similarly significant effects, or for profiling.
Service providers and international transfers
Netlify, Inc. (United States) provides website hosting and enquiry-form processing. Enquiries may be held in Netlify Forms and our business mailbox. Netlify automatically checks form submissions for spam using Akismet (Automattic, Inc., United States). We also use email and IT service providers. Access is limited to people and providers who need the data for the stated purposes, and competent authorities where legally required.
Netlify services and subprocessors may process data outside the European Economic Area. Netlify's data processing agreement provides for the EU–US Data Privacy Framework for applicable US transfers and European Commission standard contractual clauses where that framework does not apply. Agreement and safeguards: https://www.netlify.com/gdpr-ccpa/ . Ask our contact email for details of our email provider, other relevant transfers or a copy of the safeguards.
How long do we keep data?
Our operational policy is to review and delete enquiries that do not lead to a contract within 12 months of the last substantive contact, unless a separate lawful reason requires retention. This is an owner-managed retention rule, not an automatic-deletion feature of the website form. It covers copies in both the mailbox and form service.
If an enquiry becomes a client relationship, we keep the necessary information for contract performance, statutory retention duties and relevant claims for as long as required. Relevant records may be retained until a dispute is resolved. Technical logs and backups follow the provider's security and deletion cycles and the necessary purpose of the data; you can ask us for details.
Your rights
Subject to the legal conditions, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. If any processing relies on consent, you may withdraw it for the future without affecting earlier lawful processing.
Write to business@safonmarketing.info. Where necessary, we verify identity proportionately. Privacy requests generally have a statutory one-month response period; any permitted extension for a complex request and its reason will be notified within the first month.
You may complain to the Estonian Data Protection Inspectorate, https://www.aki.ee/ , info@aki.ee, Tatari 39, 10134 Tallinn, or the competent supervisory authority where you usually live or work, or where the alleged infringement occurred.