Data controller
AIBIS · email hello@aibis.ee · phone +372 557 2345 · Narva mnt 9, Tallinn, Estonia. For any data-protection question, write to the same address.
What data and why
Contact form
When you send the contact form we process your name, email address and the content of your message in order to reply. The legal basis is your consent and our legitimate interest in responding to enquiries (GDPR Art. 6(1)(a) and (f)). The form is delivered via Formspree (Formspree Inc., USA); the transfer relies on the European Commission's Standard Contractual Clauses.
Booking form (Book a call)
When you book a time we process your name and phone number, and optionally your company name, website and topic, in order to arrange and confirm the call. The legal basis is pre-contractual steps taken at your request and our legitimate interest (GDPR Art. 6(1)(b) and (f)). The booking notification is sent to us through the email service Resend (Resend Inc., USA).
Sales research and B2B cold email
AIBIS researches Estonian companies from public sources (the business registry, the company's own website) and may send an unsolicited business proposal to a company's role address (e.g. info@, sales@). We process the company name, registry code, field of activity, contact person's name and role address. The legal basis is legitimate interest (GDPR Art. 6(1)(f)) — B2B cold email to a company's role address is generally permitted in Estonia; as a rule we do not write to personalised addresses (firstname.lastname@). We use AI services (Google Gemini, Anthropic Claude and/or OpenAI) to prepare the research and draft the email; sending is done via Resend. Every email ends with a clear opt-out option — we honour an opt-out immediately and record it so we do not contact you again.
Visitor log (all visitors)
For every page view we log, server-side: IP address, approximate location (country, city, internet service provider), browser, operating system, device, referrer, the page viewed and the time. Purpose: site security and abuse prevention, and general audience measurement. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Visits are grouped by a daily pseudonym (a hash of IP, browser and date) — no persistent identifier is used.
Behavioural statistics (with consent only)
If you give consent for “Analytics” in the banner, we additionally collect detailed usage statistics: pages viewed and their order, clicks (element, text, position), time spent and active time on the page, scroll depth, total mouse movement, keystroke count (not content), the names of focused form fields (not their values), JavaScript errors, screen and window size, timezone, languages, device characteristics (CPU cores, memory, GPU), network type and performance metrics. Your visits are linked with a persistent random identifier (`aibis-vid`) stored in the browser's localStorage. Purpose: to understand how the site is used and improve it. Legal basis: consent (GDPR Art. 6(1)(a); Estonian Electronic Communications Act § 102). You can withdraw consent at any time via the “Cookie settings” link in the footer, after which behavioural tracking stops. Note: your browser history (pages visited on other sites) is not accessible to a website and is not among the data collected.
Cookies
For an ordinary visitor the site sets no cookies. The cookie aibis_portal is created when an administrator signs in — strictly necessary, no consent required (Estonian Electronic Communications Act § 102(3)). With analytics consent, a random visitor ID (`aibis-vid`) and session data are stored in the browser's localStorage — these are not cookies but are subject to the same rules and are only applied with consent. You can change your choice via the “Cookie settings” link in the footer.
Who we share data with
Your data is seen only by AIBIS and our contracted processors acting on our instructions: Formspree (form delivery), Resend (email sending), Google (Gemini — preparing company research), Anthropic and/or OpenAI (drafting emails) and Cloudflare (hosting, security and the visitor-log infrastructure). Statistics are processed by us, in our own database (Cloudflare D1). Data may be disclosed to public authorities where required by law. We do not sell or trade personal data, nor use it for ad targeting.
Retention
Contact and booking enquiries are kept for up to 12 months after the exchange ends. The visitor log and behavioural statistics are kept for up to 12 months, then deleted automatically. Sales-research company contacts are kept until you opt out, or for up to 24 months after the last contact if no cooperation results. If you become a contracting client, some data is retained longer under accounting law.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent at any time. Contact: hello@aibis.ee. We respond within one month.
Lodging a complaint
If you believe we are breaching data-protection rules, you may contact the Estonian Data Protection Inspectorate: Tatari 39, 10134 Tallinn · info@aki.ee · +372 5620 2341 · www.aki.ee.
Changes to this notice
We may update this notice from time to time. The current version is always on this page; where changes are significant we will flag them separately if we can.