PRIVACY POLICY AND COOKIE NOTICE

This Privacy Policy and Cookie Notice (hereinafter the Policy) explains how Raab OÜ collects, processes, and shares personal data (data). The Policy is based on the General Data Protection Regulation (GDPR), the laws of the Republic of Estonia, and other applicable legislation.

This Policy applies to all users of our services and website, regardless of their country of residence.

By using our website, you agree to the terms described in this Policy.

1. Data Controller

Raab OÜ
Registry code: 14317723
Address: Manta Maja, Vabaduse Puiestee 174B, 10917, Tallinn, Estonia
E-mail: raido@raab.ee
Phone: +372 51 02 835

If you have any questions regarding this Policy, please contact us at the email address above.

2. How we collect data

We collect personal data:

Directly from you – e.g. through contact forms, e-mails, or service usage.
Automatically – using cookies and similar technologies that help optimize your experience.

3. Purpose and legal basis of processing

We process data only on a lawful basis:

Consent – e.g. analytical cookies or marketing communications.
Contract performance – providing the service you requested.
Legal obligation – compliance with accounting, tax, or other legal requirements.
Legitimate interest – improving services, ensuring security, preventing misuse.

4. Cookies

A cookie is a small text file stored on your device when you use our website.

Raab OÜ uses the following types of cookies:

Session cookies – temporary, necessary for using the service.
Persistent cookies – stored on your device to remember your preferences.
Analytical cookies – collect information about how the website is used (e.g. Google Analytics). These cookies do not directly identify users.

Cookie consent

When you first visit our website, a cookie banner is displayed where you can choose whether to allow or decline analytical and marketing cookies. You can also manage cookies via your browser settings.

Instructions for popular browsers: Internet Explorer, Chrome, Firefox, Opera, Safari.

Note: If cookies are blocked, some website functions may no longer be available.

5. Sharing and international data transfers

Raab OÜ does not sell or disclose personal data to third parties, except:

when necessary to provide services (e.g. hosting, analytics, payment processors),
when legally required.

Transfers outside the EEA

Some of our service providers may be located outside the European Economic Area (EEA), for example in the United States.

In such cases, we ensure that appropriate safeguards are in place, including:

the European Commission’s adequacy decisions (if applicable), or
Standard Contractual Clauses (SCCs) approved by the European Commission.

This ensures that your data is protected at a level equivalent to the requirements of the GDPR.

6. Data retention

We retain personal data only for as long as necessary to fulfill the purposes of collection or legal obligations.

When data is no longer needed, it will be deleted.

For statistical purposes, we may use anonymized or pseudonymized data.

7. Data security

We apply appropriate technical and organizational measures to protect data, including:

encrypted connections (HTTPS),
restricted access to data,
regular updates of systems and security measures.

8. Your rights

Regardless of where you live, you have the following rights under GDPR:

access your data,
request correction or deletion,
restrict or object to processing,
withdraw consent,
request portability (where technically feasible),
file a complaint with a supervisory authority.

Non-EU users may also contact Raab OÜ directly to resolve any concerns.

9. Changes to this Policy

Raab OÜ may update this Policy to reflect changes in law or services. The latest version is always available on our website.

In case of discrepancies, the Estonian version of this Policy shall prevail.