Legal notice & data protection

Who we are, what we hold, and how to take it back

Everything on this page is written to be read, not to be survived. If a sentence is unclear, that is our failure — write to us and we will fix the page as well as the answer.

Imprint

Registered details of the data controller and the operator of this website.
Trading nameZouBisouBiz OÜ
Registry code17590046
VAT numberEE103025432
Registered officeE. Vilde tee 105-19, Mustamäe district, 12911 Tallinn, Harju maakond, Estonia
RegistryEstonian Business Register (e-Äriregister)
Email[email protected]
Privacy mailbox[email protected]
Phone+372 5375 4118

Article 13 & 14 GDPR

What we process, why, and for how long

Each processing activity has a purpose, a lawful basis and a deletion date. If an activity is not in this table, we are not doing it.

Processing activities carried out by ZouBisouBiz OÜ, with the purpose, legal basis, category of data and retention period of each.
Activity Purpose Legal basis Retention
Contact and request form Answer the request you sent, and quote for it if it becomes a project. Consent (Art. 6(1)(a)) 12 months after last reply
Data subject request form Locate your data, answer within one month, and delete or export what you asked for. Legal obligation (Art. 6(1)(c)) Until closed, then 6 months
Abuse report form Investigate a report about a service we host or operate, and act on it. Legal obligation (Art. 6(1)(c)) 12 months after closure
Newsletter Send one short letter, once or twice a year, on automation and responsible AI. Consent (Art. 6(1)(a)) Until you unsubscribe
Server and security logs Keep the service up and investigate abuse. IP addresses only, no content, no profiling. Legitimate interest (Art. 6(1)(f)) 14 days
Client project data Delivered under a signed data processing agreement, always inside the EU. Contract (Art. 6(1)(b)) Per the agreement

Data categories involved: identification data (name, email address, and where you gave it, your organisation and country), the content of your message, and technical connection data (IP address) in the case of logs only. We do not collect special-category data and we ask you not to include any in a message.

Your rights

Eight rights, one mailbox

You do not need to cite an article, and you do not need to use a form. Write to the privacy mailbox and we answer within one month. The form below exists only if you prefer to have the questions in front of you.

Access and rectification

Ask what we hold about you, get a copy, or have a wrong value corrected.

Erasure

Ask us to delete your data. We do it unless a law makes us keep it, and we tell you when that happens.

Restriction

Ask us to pause the use of your data while a question about it is settled.

Portability

Ask for your data in a structured, machine-readable file you can take to another provider.

Objection

Tell us to stop a processing activity you do not agree with. We stop it unless we have an overriding legal reason.

Withdraw consent

Change your mind about the newsletter or a form. Withdrawing does not affect what was lawful before.

Complain

Escalate to the Estonian Data Protection Inspector. We would rather hear the problem first, but this right is yours and we will not obstruct it.

Decisions and humans

No automated decision produces a legal or similarly significant effect for you. A person reads every message.

Estonian Data Protection Inspector (Andmekaitse Inspektsioon) · Tallinn · ak.ee

Exercise a right

Fields marked with an asterisk are required.

No form in front of you? Write to the same address and we will treat the two identically.

Abuse reports: a first answer inside 72 hours

We may operate managed hosting for clients. As soon as we do, this channel becomes the abuse contact of record for every service we run. The commitment is a service level, not a courtesy: every report receives a first human answer within 72 hours of arrival, including the reports we ultimately reject, and including the ones that arrive at 03:00.

72 h

first human answer, guaranteed

1 month

to reach a documented outcome

EU

logs and reply, no third party

Currently no managed hosting service is open. The channel is live anyway: it already handles reports about this website and about our open-source repositories, and it is the address to use before we start selling anything.

Report abuse

Fields marked with an asterisk are required.

An exact address shortens the investigation more than any other detail you can give.

Urgent and life-threatening case? Do not use a form: write to the privacy mailbox and put “urgent” in the subject line.

Processors and transfers

Who touches your data, and where it physically sits

Form router

Self-hosted automation server in the European Union. It forwards the message, applies the language field, and does nothing else with it.

Hosting and delivery

Static delivery behind a European edge network, with mail routed in the Union. Request logs are kept fourteen days and contain an IP address, nothing else.

Typefaces

Web fonts are the only resource loaded from outside our own servers. No request is made unless you open a page, and no identifier is stored by us.

No transfer of personal data outside the European Union is carried out. If a future project requires one, it is discussed in writing before it happens, and it appears on this page before the project starts.