Privacy Policy
Last updated: July 2025
1. Data Controller
Media-z OÜ
Registration number: 17284786
VAT: EE102883837
Narva mnt 5, 10117 Tallinn, Harju maakond, Estonia
Phone: +372 5320 4958
General enquiries: info@media-z.org
Contact for data matters: privacy@media-z.org
2. What Personal Data We Collect
Contact form: Name and business email (required); company name, phone number, selected service, referral source and message (optional). Legal basis: pre-contractual measures and legitimate interest (GDPR Art. 6(1)(b) and (f)).
Analytics: We use Plausible Analytics, which is cookieless and does not collect personal data.
Server logs: IP addresses are logged for security purposes. Legal basis: legitimate interest.
3. How We Use the Data
We use your personal data to:
- Respond to your inquiries and provide consulting services
- Communicate about projects and engagements
- Maintain the security and functionality of our website
We do NOT sell, rent, or share your data with third parties for marketing purposes.
4. Data Retention
- Contact form submissions: 24 months from last contact
- Server logs: 90 days
- Analytics data: 13 months (anonymized)
5. Data Processors
- Website hosting: the site is served from a managed Linux/Apache web host in the European Union (provider legal name: to be confirmed by Media-z OÜ). Purpose: serving the website and storing contact-form submissions. Location: EU/EEA.
- Contact-form email delivery: messages are delivered by the web host’s mail service (server SMTP) to our business mailbox. Purpose: receiving and responding to your inquiry. Location: EU/EEA.
- Analytics: Plausible Analytics, provided by Plausible Insights OÜ (Estonia, EU) — cookieless, collects no personal data, EU-hosted and GDPR-compliant.
- We do not use any CDN, CRM, advertising, remarketing or marketing-automation processors, and we do not transfer personal data outside the EEA. If this changes, this policy will be updated before any such processing begins.
- For any data request, contact privacy@media-z.org.
6. Your Rights Under GDPR (Art. 15–22)
You have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion
- Restriction — limit processing
- Data portability — receive data in machine-readable format
- Objection — object to processing
Contact: privacy@media-z.org
7. Supervisory Authority
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee
8. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page.