Data Protection and Privacy

Last updated: March 14, 2026

This privacy policy describes how Beltsys Labs OÜ (hereinafter, “Beltsys”) collects, uses and protects the personal information of users of this website and its B2B professional services, in compliance with Regulation (EU) 2016/679 (GDPR) and Estonian data protection legislation.

1. Data Controller

Identity: Beltsys Labs OÜ

Registration No. (Estonia): 16530088

Address: Lõõtsa 2A, 11415 Tallinn, Estonia.

DPO/Privacy Contact: [email protected]

2. Data We Process and Purpose

We process the data you provide us (Name, Company Email, Phone, Company) for the following purposes:

Contract Management: Execution of software development services and technical support.

Commercial Communications: Sending information about our services (always under prior consent).

Web Analytics: Improving the user experience through non-identifiable browsing analysis.

3. Legal Basis for Processing

The legal basis for processing is:

Consent: For inquiries through forms and newsletter subscriptions.

Contract Performance: For the provision of contracted professional services.

Legitimate Interest: To ensure website security and for commercial communications with existing clients (B2B).

4. International Data Transfers

We use global service providers (such as AWS, Google, Mailchimp, Zoho) for infrastructure and communications management. These transfers are carried out under the EU-U.S. Data Privacy Framework or through Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of protection for your personal data.

5. Cookie Policy

This website uses technical (necessary) and third-party analytical cookies.

Consent management: You can accept, reject or configure your cookie preferences at any time through the Cookie Settings Panel accessible from the entry banner or the footer.

We do not install marketing or tracking cookies without your prior affirmative consent.

6. Data Retention

Data will be retained:

• As long as the business relationship is maintained.
• Until the data subject requests its deletion.
• For the legally mandatory periods (in tax and regulatory compliance matters).

7. Your Rights

As a data subject, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or Object to processing.
• Portability of your data to another provider.

To exercise these rights, send a request to [email protected] indicating your right and attaching a copy of your identity document. If you believe your rights have not been addressed, you may file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).