Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect and process the following types of personal data:

• Contact information: Name, email address, and company name when you contact us through our forms
• Communication content: Messages and inquiries you submit through our contact form
• Analytics data: IP address (anonymized), browser type, device information, pages visited, time spent on site
• Cookie data: Preferences and consent choices

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide our services
• To analyze website usage and improve our services (via Google Analytics)
• To comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Consent (Art. 6(1)(a)): For analytics cookies and marketing communications
• Legitimate interest (Art. 6(1)(f)): For website security and basic functionality
• Contract performance (Art. 6(1)(b)): When you engage our services

5. Cookies and Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects:

• Anonymized IP addresses
• Pages visited and time spent
• Referral sources
• Browser and device information

You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

You can also manage your cookie preferences.

6. Data Retention

We retain your personal data only for as long as necessary:

• Contact form submissions: 2 years after last interaction
• Analytics data: 14 months (Google Analytics default)
• Cookie consent records: 1 year

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at info@engexy.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), secure hosting infrastructure, and access controls.

9. International Transfers

Your data may be transferred to Google servers (for Analytics) located outside the EU/EEA. These transfers are protected by Standard Contractual Clauses approved by the European Commission.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated revision date.