Privacy Policy

1. Introduction

ePPC OÜ ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website eppc.ee and use our services. We are based in Tallinn, Estonia, and comply with the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Information We Collect

We may collect the following categories of personal data:

• Contact Information: Name, email address, phone number, company name when you fill out forms on our website.
• Usage Data: IP address, browser type, pages visited, time spent on pages, referral source, collected through analytics tools.
• Communication Data: Records of correspondence when you contact us via email or contact forms.
• Marketing Data: Your preferences for receiving marketing communications from us.

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide our services
• To send you marketing communications (with your consent)
• To improve our website and user experience
• To analyze website traffic and usage patterns
• To comply with legal obligations

Legal bases for processing: consent, legitimate interests, contractual necessity, and legal obligation as defined under GDPR Article 6.

4. Cookies

Our website uses cookies and similar tracking technologies to:

• Essential cookies: Required for the website to function properly.
• Analytics cookies: Help us understand how visitors interact with our website (Google Analytics 4).
• Marketing cookies: Used to deliver relevant advertisements and track campaign performance.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

5. Third-Party Services

We may share data with the following third-party service providers:

• Google Analytics / Google Ads: For website analytics and advertising purposes.
• Facebook / Meta: For advertising and remarketing campaigns.
• Email service providers: For sending newsletters and communications.
• CRM tools: For managing client relationships.

All third-party processors are required to handle your data in accordance with GDPR requirements and our data processing agreements.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (SSL/TLS), access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 3 years. Analytics data is retained according to our Google Analytics settings (default 14 months).

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request restriction of processing of your personal data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@eppc.ee. We will respond within 30 days.

9. International Data Transfers

Some of our third-party service providers may transfer data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) if you believe your data rights have been violated.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.