Privacy policy

1. Data controller

The controller of personal data is Wizon OÜ (registry code 12570796, Rotermanni 8, 10111 Tallinn, Estonia; “Wizon”). If you have any questions about how we process personal data, please contact us at [email protected].

2. What data we process

We process the personal data you provide directly to us, for example through our contact form, by email or when registering for an event. This may include your name, email address, phone number, employer, job title and the content of your message. When you visit our website, we may also collect technical information, such as your IP address, device and browser type and the pages you visit, through analytics cookies, but only with your consent.

If you apply for a position with us, we process your CV, cover letter and other information you provide as part of the recruitment process. We retain application materials for up to one year after the position has been filled to consider you for other suitable opportunities. We retain them for longer only with your consent.

3. Purposes and legal bases for processing

We process personal data on the following legal bases: performance of a contract, to provide our services and respond to enquiries; legitimate interests, to manage client relationships, develop our services and establish, exercise or defend legal claims; consent, to send marketing communications and use analytics cookies; and legal obligation, to comply with legal requirements such as accounting and record-keeping obligations. We do not make automated decisions that produce legal or similarly significant effects on you.

4. Cookies

We use four cookie categories. Essential cookies are required for the site to function and are used without consent. Functionality, analytics and marketing cookies are used only with your prior consent, which you can give or withdraw through the cookie banner or the “Cookies” link in the footer. Withdrawing consent does not affect your use of the site’s core features.

5. Who we share data with

We share personal data only to the extent necessary. This includes service providers that process data on our behalf, such as web hosting, email and accounting providers, who may process personal data only in accordance with our instructions. We may also share personal data with public authorities or courts where required by law. We do not sell your personal data or share it with third parties for their own marketing purposes.

6. Transfers outside the EU

If we transfer personal data to service providers outside the European Economic Area, we do so only where an appropriate legal basis is valid. This may include an adequacy decision by the European Commission, including the EU-US Data Privacy Framework, or standard contractual clauses (SCCs).

7. Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet our legal obligations. Data related to a client relationship is generally retained for up to three years after the relationship ends, reflecting the applicable limitation period for legal claims. Accounting records are retained for seven years. Enquiries that do not result in a client relationship are deleted within one year.

8. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse and other forms of unauthorised processing. Access to personal data is limited to employees and service providers who need it to perform their respective tasks.

9. Your rights

You have the right to access your personal data, request its correction or deletion, restrict or object to its processing, request data portability, and withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can unsubscribe from marketing communications at any time using the link provided in the footer of each message. To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month.

10. Complaints

If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate ([email protected], Tatari 39, 10134 Tallinn, Estonia) or a court.

11. Changes

We update this Privacy policy as needed and always publish the current version on this page together with the date of the last update.