Privacy policy
Controller: Ecosander OÜ, registry code 10671215, e-mail info@esitlus.ee.
This privacy policy explains what data is collected through the Esitlus.ee website and service and how it is used.
1. What data do we collect?
Through the contact form, e-mail or work process, we may process the following data:
- name, company and e-mail address;
- content of the enquiry, presentation type, number of slides, deadline and other needs described by the client;
- files sent by the client, such as PowerPoint, PDF, texts, proposals or other source files;
- the client's indication of whether the material contains public information, confidential business information, personal data, special category personal data or requires clarification;
- technical data related to the website form or e-mail submission, such as sending time and e-mail headers.
2. Data categories before sending material
Before sending a file, we ask the client to indicate the type of information in the material:
- public or intended-for-publication information;
- confidential business information;
- regular personal data, such as names, job titles, e-mail addresses or photos;
- special category personal data, such as health data or other sensitive information;
- not sure and would like to clarify first.
If the material contains personal data or special category personal data, please remove or anonymise it before sending whenever possible. Special category personal data must not be sent through the form without prior agreement.
3. Why do we use the data?
We use the data for the following purposes:
- responding to enquiries;
- estimating workload and price range;
- providing the service, creating or improving a presentation;
- client communication and fulfilling agreements;
- invoicing and accounting obligations;
- protecting our rights in case of a possible dispute.
4. Legal basis
Data related to enquiries and service provision is processed primarily for pre-contractual steps and performance of a contract. Accounting-related data is processed to fulfil legal obligations. Where necessary, data may also be processed on the basis of legitimate interest, such as protecting our rights or improving service quality.
5. Files and sensitive information
The Esitlus.ee contact form allows smaller files to be sent only if the client indicates that the material contains public or confidential business information. If the client indicates that the material contains personal data, special category personal data or is unsure, the file should not be uploaded through the form.
If sensitive information is sent by mistake, Esitlus.ee may ask the client to provide an anonymised version or may delete unnecessary data if processing it is not required for the service.
6. Retention
Enquiries and related materials are retained for as long as necessary to respond to the enquiry, provide the service, prove agreements or protect legitimate interests. Work-related files are generally retained during the project and for a reasonable period after the project ends, unless otherwise agreed. Accounting documents are retained for the period required by law.
7. Who do we share data with?
Data may be technically processed by hosting, e-mail and IT service providers. If a subcontractor or cooperation partner is used, they receive access only to the information necessary for the work and under confidentiality principles. Materials are not published in a portfolio or shared with third parties without the client's separate consent, unless required by law.
8. Security
We use reasonable technical and organisational measures to protect submitted information from unauthorised access, disclosure or misuse. The website uses HTTPS if it is enabled on the server. Clients should avoid sending unnecessary personal data or special category personal data if it is not needed for the work.
9. Cookies and analytics
The first version of the website does not require marketing cookies for user tracking. If web analytics, advertising pixels or other tracking technologies are added later, this privacy policy will be updated and a cookie consent solution will be added where required.
10. Your rights
You have the right to request access to your data, request correction of inaccurate data, request deletion or restriction of processing, object to processing and exercise other rights under data protection law. To do so, write to info@esitlus.ee.
If you believe your data has been processed unlawfully, you have the right to contact the Estonian Data Protection Inspectorate.
11. Contact
For privacy-related questions, contact us at info@esitlus.ee.
Last updated: 05.05.2026