PRIVACY POLICY

1. What We Collect

We collect the following when you interact with taavos.com:

• Information you provide: Name, email address, and company name when you book a meeting via Cal.com.
• Usage data: Pages visited, time on site, and interaction patterns via Google Analytics (GA4). IP addresses are anonymized.
• Cookies: We use analytics and advertising cookies that are activated only after you consent via the cookie banner. No cookies are placed before consent. See Section 6 for details.

2. Why We Collect It

We process your data under the following legal bases (GDPR Article 6):

• Consent: Analytics and advertising cookies are placed only after you explicitly consent.
• Legitimate interest: We use usage data to understand how visitors interact with the site and to improve it. You can opt out at any time.
• Contract performance: When you book a meeting, we process your name, email, and company to schedule and prepare for it.

3. How We Use Your Data

• Scheduling meetings via Cal.com.
• Understanding site traffic and behavior via Google Analytics.
• Measuring ad performance on Google, Bing, and X to understand which campaigns generate relevant traffic.
• Preparing for scheduled meetings using information you provided during booking.

We do not use your data for marketing, email lists, newsletters, or any purpose beyond what is listed above.

4. Who Processes Your Data

We use the following third-party services that may process your data:

• Cal.com: Meeting scheduling. Privacy policy: https://cal.com/privacy
• Google Analytics (GA4): Site analytics with IP anonymization enabled. Privacy policy: https://policies.google.com/privacy
• Google Ads: Paid search advertising. Privacy policy: https://policies.google.com/privacy
• Microsoft Advertising: Paid search advertising on Bing. Privacy policy: https://privacy.microsoft.com/privacystatement
• X Ads: Paid advertising. Privacy policy: https://x.com/en/privacy
• Vercel: Site hosting. Privacy policy: https://vercel.com/legal/privacy-policy
• Google Workspace: Email communications. Privacy policy: https://policies.google.com/privacy
• Tuta Mail: Encrypted email communications. Privacy policy: https://tuta.com/privacy-policy

Each processor operates under agreements that meet GDPR requirements.

5. International Data Transfers

Some processors operate outside the EU. All transfers are protected by EU-US Data Privacy Framework (DPF) adequacy decisions or Standard Contractual Clauses (SCCs) where required.

6. Cookies

• Necessary cookies: None. The site functions without cookies.
• Analytics cookies: Google Analytics cookies are placed only after you consent via the cookie banner. They expire after 14 months. They track anonymized usage data including pages visited, session duration, and traffic source.
• Advertising cookies: Google Ads, Microsoft Advertising, and X cookies are placed only after you consent via the cookie banner. They track ad performance and conversions.

You can withdraw consent at any time by clearing your browser cookies.

7. How Long We Keep Your Data

• Meeting booking data (name, email, company): Kept indefinitely.
• Analytics data: Retained by Google Analytics for 14 months, then automatically deleted.

We do not maintain a mailing list or store data beyond what is needed for the purposes listed above.

8. Your Rights

You hold the standard GDPR rights over your data. Refer to the Estonian Data Protection Inspectorate (aki.ee) for the full list and for lodging a complaint. To exercise any right, contact inquiry@taavos.com. We respond within 30 days.

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will notify affected individuals and the Estonian Data Protection Inspectorate within 72 hours of becoming aware of the breach.

10. Data Processing Agreement

A Data Processing Agreement (DPA) is available upon request for enterprise engagements. Contact dpa@taavos.com.