Privacy Policy
Last updated: March 14, 2026
1. Data Controller
The data controller responsible for the processing of your personal data is:
OPAC OÜ
Sepapaja tn 6, 15551 Tallinn, Harju maakond, Estonia
hello@opac.ee
2. Data We Collect and How We Use It
Email Communications
When you contact us at hello@opac.ee, we collect the personal data you voluntarily provide, such as your name, email address, and the content of your message. We use this data solely to respond to your inquiry and manage our business relationship with you.
Contact Form (Coming Soon)
When we introduce our contact form, we will collect your name, email address, and message. This data will be used exclusively to respond to your inquiry.
Hosting Logs
Our hosting provider (Google Cloud Platform) automatically collects certain technical data when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your visit. This data is collected to ensure the security and stability of our website.
3. Legal Basis for Processing
We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
- Article 6(1)(b) GDPR — Processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract (e.g., responding to your business inquiry).
- Article 6(1)(f) GDPR — Processing is necessary for the purposes of our legitimate interests, namely ensuring the security and proper functioning of our website (hosting logs).
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Email communications and contact form submissions: for the duration of our business relationship and any applicable statutory retention periods.
- Hosting logs: retained for 90 days, after which they are automatically deleted.
5. Data Sharing
We do not sell, trade, or otherwise transfer your personal data to third parties. Your data may be processed by our hosting provider, Google Cloud Platform, which operates servers in the EU/EEA region (europe-north1, Finland). Google acts as a data processor on our behalf and is bound by a Data Processing Agreement in compliance with the GDPR.
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Article 15) — You have the right to obtain confirmation as to whether your personal data is being processed and to access that data.
- Right to rectification (Article 16) — You have the right to request the correction of inaccurate personal data.
- Right to erasure (Article 17) — You have the right to request the deletion of your personal data under certain conditions.
- Right to restriction of processing (Article 18) — You have the right to request the restriction of processing of your personal data.
- Right to data portability (Article 20) — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object (Article 21) — You have the right to object to the processing of your personal data based on legitimate interests.
To exercise any of these rights, please contact us at hello@opac.ee. We will respond to your request within 30 days.
7. Supervisory Authority
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
8. Cookies
Our website uses only technically necessary cookies required for the basic functionality of the website (such as locale preferences). We do not use any analytics, advertising, or tracking cookies. Should this change in the future, we will update this policy accordingly and obtain your consent where required.
9. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated revision date. We encourage you to review this page periodically.