Privacy Policy

Last updated: 28 October 2026

1. Who we are

The data controller is IT Solutions Group OÜ (registry code 14049412), Katusepapi tn 4/2, 11412 Tallinn, Estonia. Contact: info@itsolutions.ee, phone +372 5555 1879.

This policy explains which personal data we collect on itsolutions.ee, why and for how long we keep it, and what rights you have. We process data in line with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

2. What data we collect

Data you give us

Contact and enquiry forms (contact page, consultation pop-up): name, email, phone, company name and message.
PageSpeed check on the home page: your website address and, if you choose, its scores, your phone and email.
“Build your package” form: chosen platform and services, your description of current problems and goals, name, website, phone and email.
Blog newsletter: email address, language and time of consent.
Correspondence by email or phone.

Data collected automatically

Server logs: IP address, browser, page visited and time, for security and troubleshooting.
Spam protection: our forms use Cloudflare Turnstile, which analyses your IP address and technical browser signals to tell people from bots.
Statistics: Google Analytics 4 collects usage data only if you have accepted statistics cookies.

We do not knowingly collect children’s data or process special categories of personal data.

3. Purposes and legal bases

Answering enquiries and preparing quotes: steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
Providing our services: performance of a contract (Art. 6(1)(b)).
Newsletter and statistics: your consent (Art. 6(1)(a)). You can withdraw consent at any time.
Website security and spam protection: our legitimate interest (Art. 6(1)(f)).
Accounting: legal obligation (Art. 6(1)(c)).

We do not sell personal data or use it for automated decision-making or profiling.

4. How long we keep data

Enquiries and correspondence: up to 12 months after the last contact if no contract is concluded.
Client contracts and invoices: for the term of the contract and then 7 years (Accounting Act).
Newsletter: until you unsubscribe.
Google Analytics: 14 months.
Server logs: briefly, according to the hosting provider’s normal cycle.

5. Who we share data with

We use trusted providers that process data on our instructions:

Zone Media OÜ (Estonia): website hosting and email delivery.
Google Ireland Ltd: Google Analytics (only with consent).
Cloudflare, Inc.: Turnstile spam protection.

Google and Cloudflare may also process data outside the European Economic Area (USA). In that case transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. We share data with authorities only where the law requires it.

6. Your rights

to access your data and receive a copy;
to have inaccurate data corrected;
to have your data erased;
to restrict or object to processing;
to receive your data in a machine-readable format (portability);
to withdraw consent at any time.

To exercise your rights, write to info@itsolutions.ee. We reply within one month. If you believe we have infringed your rights, you can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), info@aki.ee.

7. Cookies

We use necessary cookies to run the site and statistics cookies only with your consent. Details and consent settings: Cookie Policy.

8. Security

We use encrypted connections (HTTPS), restricted access rights, regular software updates and backups. No system is entirely risk-free, but we take every reasonable step to protect your data.

9. Changes

We may update this policy. The current version and its date are always on this page.