Privacy Policy

This Privacy Policy explains how RADEVS OÜ ("we", "us", "our") collects, uses and protects personal data when you visit our website or contact us through it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

1. Data Controller

For any questions about this Privacy Policy or your personal data, please contact us at office@ra-devs.com.

2. What Data We Collect

Data you provide through our contact form:

• Name (required)
• Email address (required)
• Phone number (optional)
• Message content (required)

Data collected automatically when you visit our website:

• IP address (anonymised)
• Browser type and version
• Device type and operating system
• Pages visited, time spent, referring source
• Approximate location (country/city level)

This data is collected through Google Analytics 4 and only with your explicit consent via our cookie banner.

3. Why We Process Your Data and on What Legal Basis

4. How Long We Keep Your Data

• Contact form submissions: up to 12 months from the date of your last interaction with us, unless a business relationship is established. If we sign a contract, data is retained for the duration of the contract plus any period required by law.
• Analytics data: up to 14 months (Google Analytics 4 default).
• Data required by law (e.g. accounting records): retained for the period required by applicable Estonian and EU law.

After these periods, data is deleted or anonymised.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with the following trusted service providers ("processors"), each bound by a Data Processing Agreement:

• DigitalOcean, LLC — website hosting. Our website is hosted in DigitalOcean's European data centre (Frankfurt, Germany).
• Pipedrive OÜ — CRM system for managing inquiries and client communication. Pipedrive is an Estonian company with servers in the EU.
• Google Ireland Ltd. — website analytics (Google Analytics 4).

DigitalOcean is a US-based company, and data transfers are safeguarded by the EU Standard Contractual Clauses (SCCs) and additional technical measures, including encryption in transit and at rest. Where other processors transfer data outside the EU/EEA, the same safeguards apply.

6. Cookies and Tracking

Our website uses cookies and similar technologies. We distinguish between:

• Strictly necessary cookies — required for the website to function. No consent needed.
• Analytics cookies — used by Google Analytics 4 to understand how visitors use our site. Loaded only after your explicit consent.

You can accept, reject or adjust your cookie preferences at any time via the cookie banner or by clearing your browser cookies. See our Cookie Policy for more details.

7. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or your local supervisory authority

To exercise any of these rights, email us at office@ra-devs.com. We will respond within 30 days.

8. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS), access controls, and regular security reviews of our systems and processors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be announced on this page.

10. Contact

Questions or requests regarding your personal data: