Privacy Policy

1. Introduction

11tools OÜ ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) and Estonian data protection laws.

2. Data Controller Information

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number)
• Company information (company name, position, industry)
• Communication preferences
• Project requirements and business needs
• Payment and billing information

3.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and location data
• Browser type and version
• Operating system
• Website usage data and analytics
• Cookies and tracking technologies

4. How We Use Your Information

We use your personal information for the following purposes:

• Providing and improving our technology consulting services
• Responding to your inquiries and requests
• Communicating about our services and updates
• Processing payments and managing contracts
• Complying with legal obligations
• Protecting our business interests and preventing fraud
• Website analytics and optimization

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary for contract performance
• Legitimate Interest: For business operations, fraud prevention, and service improvement
• Legal Obligation: When required by applicable laws and regulations

6. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

• With service providers who assist in our business operations
• When required by law or legal process
• To protect our rights, property, or safety
• In connection with a business transaction (merger, acquisition)
• With your explicit consent

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Employee training on data protection
• Secure data centers and infrastructure

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contract-related data: For the duration of the contract plus 7 years for legal purposes
• Marketing communications: Until you withdraw consent
• Website analytics: 26 months from collection
• Legal compliance: As required by applicable laws

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request access to your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected]

10. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For detailed information about our cookie practices, please refer to our Cookie Policy.

12. Third-Party Services

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our website

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

15. Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority if you believe we have not complied with applicable data protection laws.

Estonian Data Protection Inspectorate:
Website: www.aki.ee
Email: [email protected]