Privacy Policy

This policy explains what personal data we handle, why, and what you can require of us. We are an EU-based operation and we work to the General Data Protection Regulation (GDPR).

Who is responsible

The controller for the data described here is DATA SOLUTIONS GLOBAL OÜ, registry code 16952049, Narva mnt 5, Kesklinna linnaosa, 10117 Tallinn, Harju maakond, Estonia. For any question about your data, or to exercise any of the rights below, email contact [at] data-solutions.global. There is no separate data protection officer; the request goes to the people who run the systems.

What we collect from this website

This website has no analytics, no advertising, no tracking pixels, no embedded social media, and no cookies of our own. See our Cookie Policy.

• Server logs. Our hosting provider records the usual technical request data — IP address, timestamp, requested file, referrer, user agent. This is needed to serve and secure the site. Legal basis: legitimate interest, Art. 6(1)(f). Retention: short, per our provider’s standard retention.
• Fonts. Typefaces are loaded from Google Fonts, which means your browser makes a request to fonts.googleapis.com and fonts.gstatic.com and Google receives your IP address. If you would rather that did not happen, block those hosts; the site is designed to remain fully usable in a fallback typeface.

There is no contact form. The only way to reach us from this site is email, which means nothing is submitted to us unless you deliberately write to us.

What we collect when you contact us or become a client

• Correspondence. Your name, email address, and whatever you tell us. Legal basis: legitimate interest in replying, Art. 6(1)(f), and pre-contractual steps, Art. 6(1)(b).
• Contract and billing data. Company details, contacts, invoices, payment records. Legal basis: contract, Art. 6(1)(b), and legal obligation for retention, Art. 6(1)(c).
• Operational data from the work itself. Delivering IT support means we may see system logs, account names, device inventories, ticket contents, and similar. Where that includes personal data about your staff or your customers, you are the controller and we are the processor. We will put a data processing agreement in place setting out exactly what we may do with it.

What we never do

We do not sell personal data, we do not share it for advertising, and we do not use client operational data to train models.

Sub-processors

We use a small number of ordinary business services — hosting, email, and where relevant a ticketing or monitoring tool. We will name the current list on request, and we name it in the data processing agreement before any processing starts.

International transfers

We work with clients in the Middle East as well as the EU and UK, so data may be accessed from outside the EEA. Where it is, we rely on an adequacy decision or on Standard Contractual Clauses, and we will tell you which applies to your engagement.

How long we keep things

Correspondence: for as long as the relationship is live, and a reasonable period after. Contract and accounting records: seven years, as the Estonian Accounting Act requires. Operational data processed on your behalf: for the term set in the data processing agreement, then deleted or returned — offboarding is a checklist, not a negotiation.

Your rights

You may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, object to processing based on legitimate interest, and ask for your data in a portable form. Email contact [at] data-solutions.global and we will respond within one month. You may also complain to a supervisory authority — ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and you may equally complain to the authority where you live.

Security

Access to client systems is least-privilege and individually attributable. Credentials live in your accounts rather than ours wherever the platform allows it. We will describe the specific measures for your engagement in the data processing agreement rather than making vague claims here.

Changes

If this policy changes materially we will update the date at the top and, for active clients, tell you directly.