Privacy Policy & GDPR

1. Data Controller

The data controller for this website is POETOZAN OÜ, registered in Estonia (Reg. No. 17165260), with its registered address at Viru väljak 2, 3rd Floor, Tallinn 10111, Estonia. For data-related inquiries, contact us at: happykidstr@gmail.com

2. What Data We Collect

We collect personal data only when you voluntarily submit it through our contact form. This may include:

• Your full name
• Your organisation name
• Your country
• Your email address
• Your message content and programme of interest

We do not use cookies for tracking, analytics or advertising. This website is a static informational site with no login, registration or user accounts.

3. Purpose of Data Processing

Personal data submitted via the contact form is used exclusively for the purpose of responding to your inquiry — specifically to discuss project partnership opportunities, answer questions about POETOZAN OÜ, or provide requested documents. We do not use your data for marketing, profiling or automated decision-making.

4. Legal Basis

Processing is based on your consent (Article 6(1)(a) GDPR), given when you voluntarily submit the contact form, and/or on legitimate interest (Article 6(1)(f) GDPR) in responding to business inquiries. You may withdraw consent at any time by contacting us.

5. Data Storage & Security

Contact form submissions are handled by Netlify Forms (Netlify, Inc., USA) and may be temporarily stored in compliance with Netlify's privacy and security standards. We review and respond to inquiries directly, and do not share your data with third parties beyond what is necessary for service delivery. Data is retained for a maximum of 12 months unless a longer retention is required for ongoing partnership correspondence.

6. No Sale of Personal Data

POETOZAN OÜ does not sell, rent or trade personal data to any third parties under any circumstances.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request we restrict processing of your data
• Objection — object to processing based on legitimate interest
• Portability — request your data in a portable format

To exercise any of these rights, contact us at: happykidstr@gmail.com. We will respond within 30 days.

8. Supervisory Authority

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee) or the supervisory authority in your country of residence.

9. Changes to This Policy

We may update this policy as our services develop. The date at the top of this page reflects the most recent revision. Continued use of this website constitutes acceptance of any changes.