Privacy Policy
Your privacy matters. Learn how we collect, use, and protect your personal information.
Last Updated: January 2, 2026
Effective Date: January 2, 2026
Introduction
Expertion Technology OÜ ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
This policy applies to all information collected through our website (expertion.co), our products and services, and any related services, sales, marketing, or events (collectively, the "Services").
Data Controller
Company: Expertion Technology OÜ
Registration Number: 17112720
VAT Number: EE102831782
Address: Tallinn, Estonia
Contact: [email protected]
Information We Collect
Personal Data You Provide
We collect information that you voluntarily provide to us when you:
- •Request a demo or consultation
- •Fill out contact forms or inquiry forms
- •Subscribe to our newsletter or marketing communications
- •Use our products or services
- •Communicate with us via email, phone, or chat
This may include: name, email address, phone number, company name, job title, company size, project details, and any other information you choose to provide.
Automatically Collected Data
When you visit our website, we may automatically collect certain information about your device and usage patterns:
- •Device information (browser type, operating system, device identifiers)
- •Usage data (pages visited, time spent, clicks, navigation paths)
- •IP address and general location data
- •Referral source and search terms
How We Use Your Information
We use the collected information for the following purposes:
Service Delivery
Provide, maintain, and improve our products and services
Communication
Respond to inquiries, provide support, and send updates
Marketing
Send promotional materials (with your consent)
Analytics
Understand usage patterns and improve user experience
Security
Protect against fraud, abuse, and security threats
Legal Compliance
Comply with legal obligations and enforce our terms
Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- •Consent: You have given explicit permission for specific processing activities
- •Contract: Processing is necessary to fulfill our contractual obligations to you
- •Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our services
- •Legal Obligation: Processing is required to comply with applicable laws and regulations
Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
- •Service Providers: Third-party vendors who assist us in operating our website, conducting business, or servicing you (e.g., hosting providers, email services, analytics tools)
- •Business Partners: Trusted partners who help us provide services or improve our offerings
- •Legal Authorities: When required by law or to protect our rights, safety, or property
- •Business Transfers: In connection with a merger, acquisition, or sale of assets
All third-party service providers are contractually required to maintain the confidentiality and security of your personal data and use it only for the purposes we specify.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. The retention period depends on:
- •The nature of the data and the purposes for which we collected it
- •Our ongoing business relationship with you
- •Legal, regulatory, tax, accounting, or reporting requirements
When we no longer need your personal data, we will securely delete or anonymize it.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data (subject to legal obligations)
Right to Restriction
Request restriction of processing your data in certain circumstances
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent
Withdraw consent at any time (without affecting prior processing)
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- •Encryption of data in transit and at rest
- •Regular security assessments and audits
- •Access controls and authentication mechanisms
- •Employee training on data protection practices
- •Secure data backup and recovery procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
International Data Transfers
As we serve clients globally, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- •Standard Contractual Clauses (SCCs) approved by the European Commission
- •Adequacy decisions recognizing equivalent data protection standards
- •Binding Corporate Rules or other approved mechanisms
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and assist in our marketing efforts. You can control cookie settings through your browser preferences.
For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will delete the information.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- •Posting the updated policy on our website with a new "Last Updated" date
- •Sending you an email notification (if you have provided your email address)
We encourage you to review this policy periodically to stay informed about how we protect your data.
Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Supervisory Authority
If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority or the Estonian Data Protection Inspectorate:
Estonian Data Protection Inspectorate
Website: www.aki.ee/en
Email: [email protected]