Privacy
Privacy Policy
Last updated: 16 October 2026
We respect your privacy. This page explains in plain language what data we collect, why, and what your rights are.
1.Data controller
Lemnoria OÜ is a private limited company (Osaühing) registered in Estonia. Register code: 17521306. Address: Sepapaja tn 6, Lasnamäe linnaosa, Tallinn, 15551, Harju maakond, Estonia.
This policy is issued by Lemnoria OÜ as the data controller under the EU General Data Protection Regulation (“GDPR”).
Contact: ••••••@lemnoria.com
2.What data we collect
We only collect data that you share with us. The site has no accounts or registration.
- Through the contact form: your name, email address and message, plus your company name and phone number if you choose to provide them.
- When you write to us by email: the information you send and your contact details.
- Server logs: the infrastructure serving the site may keep standard logs such as IP address, browser information and access time for security and troubleshooting.
3.Why we use your data
- To respond to your request and carry out the free automation analysis.
- To prepare quotes and continue pre-contract discussions.
- To keep the site secure and prevent abuse (the contact form is protected by Cloudflare Turnstile).
- To meet our legal obligations.
4.Legal bases
We process your data under Article 6(1) GDPR: taking steps at your request before entering into a contract (b), compliance with a legal obligation (c), and our legitimate interests, which are answering your enquiry and keeping the site secure, as long as they do not override your rights (f).
5.Who we share data with
We do not sell your personal data or share it with third parties for advertising. We share it only as far as needed to provide the service, with:
- The automation (n8n) server that we host ourselves, which receives and processes contact form submissions.
- Google Sheets (Google), where form submissions are recorded; Google acts as a service provider processing data on our behalf and on our instructions.
- Cloudflare, which provides bot protection (Turnstile) on the contact form and may process technical data such as your IP address for that purpose.
- Our email and hosting/infrastructure providers (these may change; this page is updated when they do).
- Competent public authorities, where we receive a lawful request.
6.International transfers
We are based in Estonia and data is primarily processed within the European Economic Area (EEA). Our automation server and service providers such as Google and Cloudflare may process data in countries outside the EEA; in that case the transfer relies on appropriate safeguards required by the GDPR, such as standard contractual clauses or an adequacy decision.
7.Cookies and tracking
This site currently does not use analytics, advertising or tracking cookies. The only value we store in your browser is a language preference cookie (“lang”) that remembers which language version you chose; it is strictly functional. Cloudflare Turnstile may set technical values needed to tell humans from bots. If we add analytics or similar tools in the future, we will update this policy and ask for your consent where required.
8.Retention
We keep your contact requests for up to 2 years after the conversation ends, after which they are deleted or anonymised. Data that we are legally required to keep is retained for the period required.
9.Security
We protect your data against unauthorised access, loss and misuse with reasonable technical and organisational measures: encrypted connections (HTTPS), access restriction and regular updates. No transmission over the internet is completely risk-free, however.
10.Your rights
Under Articles 15-22 GDPR you can contact us to:
- Find out whether we process your data and obtain a copy of it.
- Learn the purposes, the recipients and the retention period.
- Have inaccurate or incomplete data corrected.
- Have your data erased.
- Restrict processing, and object to processing based on legitimate interests.
- Receive your data in a structured format (data portability).
- Not be subject to a decision based solely on automated processing; we do not make such decisions.
- Withdraw consent at any time where processing is based on consent.
11.How to exercise your rights and complain
To exercise your rights, write to ••••••@lemnoria.com with enough information for us to verify your identity. We respond within one month.
If you are not satisfied with our response, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in your own country.
12.Changes to this policy
We may update this policy from time to time. The current version is always published on this page and the date at the top changes.