Privacy policy

Last updated: 5 November 2026

This privacy policy explains how Renald Grupp OÜ processes the personal data of visitors to renaldweb.ee, people who contact us and our clients.

Data controller

Renald Grupp OÜ
Registration number: 11002284
Registered address: Iirise tn 1/5, Näpi, Rakvere Parish, Lääne-Viru County, 44305, Estonia
Phone: +372 5123121
Email: info@renaldweb.ee

What personal data do we process?

Depending on your enquiry and the services you use, we may process the following data:

Contact details: your name, email address and phone number, if you have provided it.
Enquiry information: information provided through the contact form, by email or by phone, and related correspondence.
Client and billing information: data relating to quotes, contracts, the provision of services and billing.
Technical data: for example, your IP address, browser and device information, and technical events associated with your use of the website.
Usage statistics: data collected with your consent about the pages you visit, how you reach the website, your activity on the site, the duration of your visit, and your device and browser.

Please do not include sensitive personal data in messages sent through the contact form or by email unless it is necessary to deal with your enquiry.

Why we process personal data and our legal bases

Responding to enquiries and preparing quotes. If you contact us on your own behalf to enter into a contract, we process the necessary data to take steps at your request before entering into that contract. For other enquiries and communications with company representatives, processing may be based on our legitimate interest in responding to enquiries and managing business communications.
Entering into contracts and providing services. We process an individual client’s data to perform a contract. We process the contact details of a corporate client’s representative on the basis of our legitimate interest in managing cooperation and performing the contract between the companies.
Accounting and compliance with legal obligations. Processing is based on compliance with a legal obligation.
Website security and spam prevention. Processing is based on our legitimate interest in protecting the website, contact form and information systems against abuse. This does not provide a basis for using non-essential analytics or advertising cookies without consent.
Collecting usage statistics and improving the website. We use Voog’s statistics service and Google Analytics 4 to understand how the website is used and assess how well its content and contact options work. Processing is based on your consent, which you can give through the website’s cookie notice.
Establishing, exercising and defending legal claims. Where necessary, we process relevant data on the basis of our legitimate interest in protecting our rights.

Do you have to provide your data?

Contacting us is voluntary. When you use the contact form, your name and email address are required so that we can deal with your enquiry and reply to you. Without the necessary contact details, we may be unable to respond.

Without the data needed to enter into a contract, provide services and issue invoices, we may be unable to offer the relevant service or perform the contract.

Consent to analytics is voluntary. Refusing consent does not prevent you from accessing the website’s main content or contacting us.

Service providers and data transfers

We use service providers that may have access to personal data to the extent necessary to provide their services. We use the following services to operate the website and manage communications:

Voog, operated by Edicy OÜ: website hosting, the technical operation of the contact form and consent-based website statistics.
Zoho Mail: receiving, sending and storing emails.
Google Analytics 4: consent-based website usage analysis and statistics.
Google reCAPTCHA: protecting the contact form against spam and automated abuse.

When Google Analytics is used, data about your use of the website is sent to Google. This may include the addresses of pages visited, how you reached the website, your activity on the site, device and browser information, approximate location and cookie-related identifiers.

When Google reCAPTCHA is used, technical information needed for risk assessment is sent to Google. The service may process information such as your IP address, browser and device details, and information about your interactions with the service.

Because our service providers operate internationally, personal data processing may involve access to data from outside the European Economic Area. In such cases, an appropriate basis for the transfer must be applied, together with additional safeguards where necessary, such as the European Commission’s standard contractual clauses.

You can find further information about each service’s data processing and safeguards in the service providers’ policies and documentation linked below. You can also contact us for information about the relevant safeguards.

We may disclose data to a competent public authority where required by law.

We do not sell personal data or disclose it to other companies for their own marketing purposes.

Data retention

We retain personal data for as long as necessary to fulfil the purpose for which it is processed. Retention depends on the nature of the data, the client relationship, legal obligations and potential legal claims.

Enquiries and quotes: we retain these for as long as necessary to deal with the enquiry and conduct related negotiations. If a contract follows, the retention criteria for data relating to the contract and the provision of services apply.
Data relating to contracts and the provision of services: we retain this data during the performance of the contract and afterwards to the extent necessary to meet legal obligations or establish, exercise or defend legal claims.
Accounting source documents: we retain these for seven years from the end of the financial year in which the transaction was recorded in the accounting records on the basis of the source document. Other documents are subject to the retention periods required by law.
Data relating to disputes: we retain this data for as long as necessary to resolve the dispute and protect our rights, taking into account applicable limitation periods and the conclusion of proceedings.
Google Analytics 4 data: our settings specify a retention period of 2 months for event data and 14 months for user data. These settings do not determine the retention period for most standard aggregated reports; aggregated statistics may be retained for longer.
Cookies and browser storage: their expiry periods are described in the cookies section below. A cookie’s lifetime does not automatically determine how long data collected on the server is retained.

When there is no further need or legal basis for retaining the data, it is deleted or anonymised so that individuals can no longer be identified from it.

Cookies and website statistics

The website uses cookies and other browser storage technologies to operate the site, remember your choices and, with your consent, collect usage statistics.

Voog’s statistics service and Google Analytics 4 are activated with your consent. In the cookie notice, you can select “Allow all” or “Allow only necessary”. You can continue using the website without consenting to analytics.

Necessary storage and consent preferences

site_lang: remembers your website language preference. Voog specifies a lifetime of up to two years.
vg_cookie_consent: saves your cookie notice selection in your browser’s local storage. Your choice remains valid for 180 days unless you change it or clear your browser’s storage earlier.

Voog statistics cookies

__ewsa: distinguishes visitors. Its lifetime is up to two years. It is used with your consent.
__ewsb: distinguishes browsing sessions. Its lifetime is 30 minutes. It is used with your consent.

Google Analytics 4 cookies

_ga: distinguishes visitors. Google’s default lifetime is up to two years.
_ga_<identifier>: maintains session state. The identifier in the cookie name depends on the website’s Analytics configuration. Google’s default lifetime is up to two years.

Analytics cookies are used with your consent. Their actual lifetime may be shorter because of browser restrictions.

Google reCAPTCHA

Google reCAPTCHA, which protects the contact form against spam, may use the _GRECAPTCHA cookie and other storage needed for risk assessment when the service starts. You can find more information about how it works in the Google reCAPTCHA documentation.

Changing and withdrawing consent

You can change or withdraw your consent to analytics at any time using the cookie icon on the website. To opt out of analytics, select “Allow only necessary”.

Your new choice is saved immediately. With Voog’s current technical implementation, analytics that have already started are stopped after you refresh the page or navigate to another page. Until then, analytics scripts previously loaded with your consent may continue sending data from the open page.

After withdrawing consent, refresh the page so that analytics also stop on the page you currently have open.

Withdrawing consent does not affect the lawfulness of processing carried out with your consent before withdrawal, nor does it automatically delete data collected previously. You can request deletion as described below.

You can also delete cookies and clear your browser’s local storage through your browser settings. Blocking necessary storage may affect the operation of the website or contact form.

Your rights

Subject to the applicable conditions, you have the right to:

Receive information about the processing of your personal data and access the data we process about you.
Have inaccurate data corrected and incomplete data completed.
Request deletion of your data or restriction of processing where there is a legal basis for doing so.
Object to processing based on legitimate interests.
Receive the data you have provided in a machine-readable format where processing is based on consent or a contract, is carried out by automated means and the other conditions for the right to data portability are met.
Withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out with your consent before withdrawal.
Lodge a complaint with the Estonian Data Protection Inspectorate.

To exercise your rights, email info@renaldweb.ee. Where necessary, we will ask for additional information to verify your identity.

We will respond without undue delay, normally within one month of receiving your request. For complex or numerous requests, this period may be extended by up to two further months. We will inform you of any extension and the reasons for it within the first month.

If you believe that the processing of your personal data has infringed your rights, you can contact the Estonian Data Protection Inspectorate. You do not have to contact us before lodging a complaint.

Changes to this privacy policy

We update this privacy policy when our data processing, the services we use or legal requirements change. The current version is published on this website together with the date it was last updated.