Privacy Policy

Last updated: 9 June 2026

This Privacy Policy explains how Wyvilo OÜ ("Wyvilo", "we", "us") collects, uses and protects personal data when you visit our website or use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR 2016/679) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

  • 1. Data controller

    • The controller of your personal data is:

      • Wyvilo OÜ
      • Registry code: [registrikood]
      • Address: Narva mnt 17, 10120 Tallinn, Estonia
      • E-mail: privacy@wyvilo.com
      • Data protection contact: [DPO name / e-mail, if appointed]
  • 2. What data we collect
      • Contact data you provide voluntarily — name, e-mail address, company, and the content of your message when you contact us or book a call.
      • Technical & usage data collected automatically — IP address, browser type, device, pages visited, referring URL and timestamps.
      • Cookie data — see our Cookie Policy for details.
      • Client & contract data when you engage our services — billing details, project information and correspondence.
  • 3. Purposes and legal bases

    • We process personal data on the following GDPR Article 6 legal bases:

      • To respond to enquiries and provide our services — performance of a contract or pre-contractual steps (Art. 6(1)(b)).
      • To operate, secure and improve our website — our legitimate interests (Art. 6(1)(f)).
      • For analytics and non-essential cookies — your consent (Art. 6(1)(a)).
      • To comply with accounting, tax and other legal obligations — legal obligation (Art. 6(1)(c)).
  • 4. Cookies

    • Our website uses cookies and similar technologies. Non-essential cookies are only set with your consent. For full details and how to manage your preferences, see our Cookie Policy.

  • 5. Sharing and processors

    • We do not sell personal data. We may share data with trusted service providers (processors) acting on our behalf — for example hosting, e-mail, analytics and payment providers — under data processing agreements. We may also disclose data where required by law or to protect our legal rights.

  • 6. International transfers

    • Where data is transferred outside the European Economic Area, we ensure an adequate level of protection through European Commission adequacy decisions or appropriate safeguards such as the EU Standard Contractual Clauses.

  • 7. Retention

    • We keep personal data only as long as necessary for the purposes above. Enquiry data is kept for up to 24 months; contract and accounting records are kept for 7 years as required by Estonian law. After these periods data is deleted or anonymised.

  • 8. Your rights

    • Under the GDPR you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time. To exercise these rights, contact us at privacy@wyvilo.com.

      You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or your local supervisory authority.

  • 9. Security

    • We apply appropriate technical and organisational measures — including encryption in transit, access controls and regular reviews — to protect personal data against unauthorised access, loss or misuse.

  • 10. Children

    • Our website and services are not directed at children under 16. We do not knowingly collect their personal data.

  • 11. Changes

    • We may update this Privacy Policy from time to time. The current version with its date is always available on this page.

  • 12. Contact

    • For any privacy question, contact us at privacy@wyvilo.com.