Privacy Policy
1. Introduction
This Privacy Policy outlines how Insignia Digital Services OÜ ("we", "us", "our") collects, uses, stores, and protects your personal data when you interact with our website. We are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR) and Estonian data protection laws.
2. Data Controller
Insignia Digital Services is the data controller for the purposes of this policy.
3. Personal Data We Collect
We may collect the following personal data:
- Full name
- Email address
- Phone number
- IP address
- Any other data voluntarily provided via our forms or communications
4. How We Collect Data
Personal data is collected through:
- Contact forms
- Cookies and tracking technologies
- Direct communications with us
5. Legal Basis for Processing
We process personal data on the following bases:
- Your consent
- Contractual necessity
- Compliance with legal obligations
- Legitimate interests, such as improving our services
6. Purpose of Data Processing
We use your data to:
- Provide and manage our services
- Respond to enquiries
- Improve website functionality
- Comply with legal requirements
Access to personal data is limited strictly to personnel who require it to fulfil their job functions. Should it be necessary for third-party service providers to access personal data to assist in service delivery, such third parties will be required to adhere to equivalent data protection standards.
7. Data Accuracy
You are responsible for providing accurate personal data. We take reasonable steps to ensure data is kept accurate and up to date.
8. Storage and Retention
We retain your personal data only as long as necessary for the purposes stated above or as required by applicable law. Your data may be securely stored or hosted on servers maintained by trusted third-party providers, with appropriate safeguards to ensure confidentiality and integrity.
9. Security Measures
We implement appropriate security measures to protect your data, including encryption, secure servers, access control protocols, firewall protection, and staff data protection training.
10. Cross-Border Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure adequate safeguards are in place, including data processing agreements and standard contractual clauses, as required by GDPR.
11. Third-Party Sharing
We do not share your data with third parties unless required to do so to deliver our services or comply with legal obligations. Where third-party access is necessary, such parties are bound by contractual terms that enforce the same level of data protection as set out in this policy.
12. Data Subject Rights
You have the following rights under GDPR:
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure ("right to be forgotten")
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right not to be subject to a decision based solely on automated processing
- The right to withdraw consent at any time
13. Complaints and Disputes
If you have concerns about your data or how it is processed, you may contact us directly. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate:
Website: https://www.aki.ee/en
14. Contact Information
If you have any questions or concerns regarding this Privacy Policy, you may contact us at:
- Legal Name: Insignia Digital Services OÜ
- Email: contact@insigniadigitalservices.com
- Address: Narva Road 5-78, Kesklinn District, Tallinn, Harju County, 10117, Estonia
- Phone Number: +380 63 463 32 90
- Company Registration Number: 16541614