Privacy
What this site collects, why, for how long, and what you can ask us to do about it. It is short because the site does little.
This site sets no cookies
There is no analytics, no advertising, no tracking and no consent banner, because there is nothing to consent to. Nothing is stored on your device.
Who is responsible
Crossroad Management OÜ, Tallinn, Estonia, is the controller of the personal data described here. For anything on this page, write to info@crma.eu.
What we collect
If you use the enquiry form
Your name, organisation, email address and whatever you write in the message. It is delivered to us by email. We use it to read and answer your enquiry, and for nothing else. The legal basis is our legitimate interest in responding to people who contact us, and where the enquiry leads towards work, the steps taken at your request before entering a contract.
When any page is requested
Our web server records your IP address, the time, the address requested, the response, the referring page and your browser's user-agent string. This is ordinary server logging; it happens for every request, including by automated crawlers.
The legal basis is our legitimate interest in operating the site securely, investigating abuse, and being able to reconstruct after the fact what was accessed and by whom. That last purpose is the reason the retention period below is longer than a typical marketing site would need: without a sufficiently long record, questions about historical access to material on this domain cannot be answered at all.
How long we keep it
- Server logs — five years from the date of the request, then deleted.
- Enquiries — for as long as needed to deal with your enquiry and any work that follows from it, and afterwards only where we are required to retain correspondence.
- Abuse-prevention counters — to stop the enquiry form being used to send bulk mail, we count recent submissions against a one-way hash of your IP address. These counters are deleted automatically after two days.
Who else sees it
Our hosting provider, Zone Media OÜ in Estonia, processes the data on our behalf as part of hosting this site and delivering our email.
This page and the home page load a typeface from Google Fonts. To serve it,
Google receives your IP address, and Google LLC is based in the United States.
No cookie is set by this. If you would rather it did not happen, blocking
fonts.googleapis.com and fonts.gstatic.com changes
only the typeface, not the content.
We do not sell personal data and we do not share it for advertising.
What you can ask for
Under the GDPR you may ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it, or ask for it in a portable form. Write to info@crma.eu and we will answer within one month.
If you are not satisfied with our answer, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee.