Who is responsible
This site, duor.digital, is run by Duor Digital OÜ, a private limited company registered in Estonia. We decide why and how the personal data described here is used, which makes us its controller under the General Data Protection Regulation (GDPR).
- Company
- Duor Digital OÜ
- Registry code
- 17631584
- Registered office
- Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
- Privacy questions
- hi@duor.digital
- Company e-mail
- corporate@duor.digital
We have not appointed a data protection officer; the law does not require one for a company of our size and activity. Write to hi@duor.digital and a person on the team will answer.
What we collect and why
When you write to us
The contact form asks for your name, an e-mail address or Telegram handle and a few words about your project. With your message the server also records the page you sent it from, your IP address, your browser’s user agent and the time. All of it goes into our inquiry inbox, which only our team can open.
We use your details to reply, to talk through the project and, if you ask for one, to prepare an estimate or proposal. The legal basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)). Where you write on behalf of a company, or about something other than a project, we rely on our legitimate interest in answering the people who contact us (Art. 6(1)(f)).
The IP address and user agent help us spot spam and abuse of the form. To limit how often one address can send the form, the server also holds your IP address in memory for one minute. The legal basis for both is our legitimate interest in keeping the site secure (Art. 6(1)(f)).
The same applies if you e-mail hi@duor.digital or message us on Telegram instead. Giving us your details is up to you, but without a way to reach you we cannot reply.
No analytics or tracking
The site uses no analytics, no session recording, no advertising and no other tracking tools, and no one else's code runs on it. We do not follow you from page to page or across other sites.
When you simply visit
Like any web server, the one this site runs on may log requests - IP address, time, the page asked for and the browser - to keep the service running and secure. The legal basis is our legitimate interest (Art. 6(1)(f)). Fonts, images and scripts are served from our own domain; the site loads nothing from third parties.
Who else receives your data
- Our hosting provider runs the server this site and the inquiry inbox live on. It stores the data for us and may not use it for anything else.
- Our e-mail provider carries the messages you send to our addresses and our replies.
- Telegram, if you choose to contact us there; Telegram handles that chat under its own privacy policy.
- Authorities, courts or our legal and accounting advisers, where the law requires or allows it.
We do not sell personal data, and we do not share it for advertising.
How long we keep it
- Inquiries (form, e-mail, Telegram): 24 months after our last contact with you, then deleted. If a contract follows, the correspondence becomes part of the client file and is kept for the length of the contract and afterwards for as long as the law requires - for example, seven years for accounting records under the Estonian Accounting Act.
- IP address and user agent saved with an inquiry: deleted together with the inquiry.
- The rate-limit record in server memory: one minute.
- Server logs: no longer than 30 days.
- What is stored in your browser: as listed in the table above.
Your rights
Under the GDPR you can ask us to:
- show you what personal data we hold about you and give you a copy (access);
- correct data that is wrong or incomplete (rectification);
- delete it (erasure);
- pause its use while a question about it is settled (restriction);
- hand it over to you or another company in a machine-readable format (portability);
- stop using it where we rely on legitimate interests (objection).
To use any of these rights, write to hi@duor.digital. It is free. We answer within one month and may ask you to confirm who you are first.
Complaints
If you think we handle your data unlawfully, please tell us first - we would rather fix it. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, aki.ee, or to the data protection authority of the EU country where you live or work.
No automated decisions
We make no decisions about you by automated means alone, including profiling, that have legal or similarly significant effects. Every inquiry is read by a person.
Security
The site is served only over HTTPS. The inquiry inbox is behind a password, sends no data to any third party and is not indexed by search engines. Access is limited to the people on our team who answer inquiries.
Changes to this policy
When we change this policy we publish the new version here with a new date. If we ever start using analytics or any other cookies that are not strictly necessary, we will say so here first and ask for your consent before setting them.
Contact
Duor Digital OÜ, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia. Privacy questions: hi@duor.digital. See also our terms of use.