========================================
PRIVACY POLICY
========================================
Last updated: January 2025
G.T.M GANG OÜ ("we", "us", "our")
respects your privacy and is
committed to protecting your
personal data in accordance with
the EU General Data Protection
Regulation (GDPR).
This policy explains what data we
collect, why, how we use it, and
your rights regarding your data.
[01] DATA CONTROLLER
+--------------------------------------+
| G.T.M GANG OÜ |
| Tallinn, Estonia |
| Email: HQ@gtm-gang.com |
+--------------------------------------+
We are the data controller for
any personal data collected
through this website and our
consultancy services.
[02] CATEGORIES OF DATA COLLECTED
A. Contact Information
- Name, email address, phone
- Company name, job title
Collected when you contact us
B. Technical Data
- IP address, browser type
- Device info, operating system
Collected automatically for
security and site functionality
C. Business Information
- Project requirements, tech stack
- Communications about services
Collected during consultations
[03] PURPOSES & LEGAL BASIS
Purpose: Respond to inquiries
Data: Contact info
Basis: Legitimate interest (B2B)
Purpose: Provide services
Data: Contact & business info
Basis: Contract performance
Purpose: Site security
Data: Technical data
Basis: Legitimate interest
Purpose: Marketing (if any)
Data: Contact info
Basis: Your explicit consent
[04] THIRD PARTY SERVICES
We use the following services:
Cloudflare Inc.
Purpose: Hosting, CDN, security
Data: Technical/IP data
Location: USA (with safeguards)
Policy: cloudflare.com/privacypolicy
Google LLC (Google Fonts)
Purpose: Typography/fonts
Data: IP address, usage data
Location: USA (with safeguards)
Policy: policies.google.com/privacy
All processors operate under GDPR-
compliant data processing agreements.
[05] INTERNATIONAL DATA TRANSFERS
Some of our service providers are
based outside the European Economic
Area (EEA). When data is transferred
outside the EEA, we ensure adequate
protection through:
> EU-US Data Privacy Framework
> Standard Contractual Clauses (SCCs)
> Adequacy decisions where applicable
[06] COOKIES & TRACKING
This website uses minimal cookies:
> Essential cookies from Cloudflare
for security (e.g., __cfduid)
> Google Fonts may set cookies
for font delivery optimization
We do NOT use analytics tracking,
advertising cookies, or social
media tracking on this site.
You can control cookies via your
browser settings.
[07] DATA RETENTION
We retain personal data only as
long as necessary:
> Business contact data: Duration
of relationship + 3 years (for
legal/accounting requirements)
> Project documentation: 5 years
(contractual/legal obligations)
> Technical logs: Up to 12 months
> Inquiry emails: 2 years or until
you request deletion
[08] YOUR RIGHTS UNDER GDPR
You have the right to:
> Access - Request a copy of
your personal data we hold
> Rectification - Correct any
inaccurate or incomplete data
> Erasure - Request deletion
("right to be forgotten")
> Restriction - Limit how we
process your data
> Portability - Receive your
data in a portable format
> Object - Object to processing
based on legitimate interest
> Withdraw consent - At any
time, without affecting prior
processing legality
To exercise any right, email:
We will respond within 30 days.
[09] AUTOMATED DECISION-MAKING
We do NOT use automated decision-
making or profiling that produces
legal effects or similarly
significant effects on you.
[10] DATA SECURITY
We implement appropriate technical
and organizational measures:
> SSL/TLS encryption (HTTPS)
> Secure hosting via Cloudflare
> Limited access to personal data
> Regular security reviews
No system is 100% secure, but we
take reasonable steps to protect
your data from unauthorized access.
[11] COMPLAINTS
If you believe your data has been
processed unlawfully, you have the
right to lodge a complaint with:
Estonian Data Protection
Inspectorate
(Andmekaitse Inspektsioon)
Website: www.aki.ee
Email: info@aki.ee
We encourage you to contact us
first so we can address concerns.
[12] POLICY UPDATES
We may update this policy to
reflect changes in our practices
or legal requirements.
Changes will be posted here with
an updated revision date. For
significant changes, we will make
reasonable efforts to notify you.
[13] CONTACT US
For any privacy-related questions:
G.T.M GANG OÜ
Email: HQ@gtm-gang.com
Tallinn, Estonia