Privacy Policy

Last updated: 3 May 2026

ContiumSoft OÜ ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect when you visit contiumsoft.com (the "Site"), why we collect it, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and Estonian data-protection law.

1. Who we are (Data Controller)

For data-protection inquiries — including requests to access, correct, or delete your personal data — please use the contact form at contiumsoft.com/#contact and indicate "Privacy request" in your message.

2. What data we collect

We collect data only when you actively interact with the Site or, with your consent, when our analytics provider records visit information.

a) Contact form submissions

When you submit the contact form on the homepage, we collect:

• Your name
• Your email address
• The contents of your message

This information is transmitted to our form processor, Web3Forms, and forwarded to us by email so we can respond.

b) Website analytics (with your consent)

If you grant consent via the cookie banner, we use Google Analytics 4 (GA4) to understand how visitors use the Site. Google Analytics may collect:

• Your IP address (anonymised in transit)
• Your browser type and operating system
• Pages visited, time spent, referrer
• Approximate geographic location (city level)

We do not use Google Analytics for advertising or remarketing. If you do not consent to analytics, no Google Analytics data is collected from your visit.

c) Other third-party services

The Site loads the following resources from third-party CDNs. These providers may log your IP address and request metadata as part of standard HTTP delivery:

• Bootstrap CSS (stackpath.bootstrapcdn.com)
• Inter font (fonts.googleapis.com / fonts.gstatic.com)
• jQuery and Popper.js (code.jquery.com, cdn.jsdelivr.net)

This is standard CDN behaviour and is not used by us for tracking.

3. Legal basis for processing

• Contact form submissions: legitimate interest (Article 6(1)(f) GDPR) in responding to inquiries, and contractual necessity where your message concerns a potential engagement.
• Analytics: your consent (Article 6(1)(a) GDPR), given via the cookie banner. You can withdraw consent at any time by clearing your browser storage; the banner will reappear on your next visit.

4. How long we keep your data

• Contact form submissions are retained for as long as needed to respond and complete any resulting engagement, after which they are deleted unless we are required to keep them for legal or accounting reasons (in Estonia, accounting records must be retained for seven years).
• Analytics data is retained by Google Analytics under the GA4 default retention (currently 14 months).

5. Sharing your data

We do not sell or rent your personal data. We share your data only with the service providers listed above (Web3Forms, Google Analytics) strictly to operate the Site, and only as necessary. These providers are bound by their own privacy policies and, where they process data outside the European Economic Area, by Standard Contractual Clauses or another mechanism approved under the GDPR.

6. International transfers

Some of our processors operate servers outside the European Economic Area. Where personal data is transferred outside the EEA, the transfer is protected by Standard Contractual Clauses or another mechanism approved under Articles 44–49 of the GDPR.

7. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you (Article 15)
• Have inaccurate data corrected (Article 16)
• Have your data deleted in certain circumstances (Article 17)
• Restrict our processing of your data (Article 18)
• Receive your data in a portable format (Article 20)
• Object to processing based on legitimate interest (Article 21)
• Withdraw consent for analytics at any time (Article 7)

To exercise these rights, contact us via the form at contiumsoft.com/#contact. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

8. Cookies and local storage

We use a minimal set of cookies and similar storage:

• Strictly necessary: a localStorage entry recording your consent choice (contiumsoft.cookie-consent). This is required for the consent banner to work and is not subject to consent under Article 5(3) of the ePrivacy Directive.
• Analytics (only with consent): Google Analytics sets _ga and _ga_* cookies to distinguish unique visitors and sessions. Default expiry is 13 months.

You can clear cookies and local storage in your browser settings at any time.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be flagged on the homepage.

10. Contact