Privacy policy

Data controller

ELVAZ OU, Harju maakond, Tallinn, Lasnamae linnaosa, Sepapaja tn 6, 15551, Estonia.

Contact for any question relating to personal data: contact@legen1.com.

Data collected

The site collects only the data you send us deliberately:

• →Through the contact form: full name, email address, phone number, company name and, where applicable, the free-text message you write.
• →Through the Calendly booking module: the information you enter in the booking window and the slot you choose.
• →Technical connection data processed by our host for security and service reliability purposes (IP address, server logs).

Purposes and legal bases

• →Answering your enquiry and getting back to you: pre-contractual steps taken at your request (article 6.1.b GDPR).
• →Arranging and holding the meeting you booked: pre-contractual steps taken at your request.
• →Keeping the site secure and available: legitimate interest (article 6.1.f).
• →Meeting our legal and accounting obligations once a contractual relationship starts: legal obligation (article 6.1.c).

Whether answers are mandatory

The full name, email, phone and company fields are required to handle your enquiry: without them we cannot get back to you. The message field is optional.

Recipients and processors

Your data is intended solely for the authorised staff of ELVAZ OU in charge of the client relationship. It is never sold, rented or passed on to third parties for advertising purposes.

The following technical providers act as processors:

• →Vercel Inc. (United States): website hosting.
• →o2switch (France): email hosting.
• →Calendly LLC (United States): booking module, loaded only when you open the booking window.

Transfers outside the European Union

Some providers are established in the United States. Those transfers are governed by the European Commission standard contractual clauses and, where applicable, by the providers certification under the EU-U.S. Data Privacy Framework. You can obtain a copy of the safeguards in place by writing to contact@legen1.com.

Retention periods

• →Enquiries with no commercial follow-up: 3 years from your last contact.
• →Data linked to a contractual relationship: for the duration of the relationship, then archived for the applicable statutory limitation period.
• →Technical connection logs: 12 months maximum.

Security

The site is served over HTTPS only. Web fonts are hosted on our own servers, so no connection data is sent to a third-party provider when the page loads. Access to data is restricted to the people who need it to do their job.

Cookies

The site sets no analytics cookies and no advertising trackers. No consent is therefore required when the page loads. Deliberately opening the Calendly module may lead that provider to set technical cookies, governed by its own privacy policy.

Your rights

You have the following rights over your data:

• →Right of access: obtain confirmation that data concerning you is processed and receive a copy of it.
• →Right to rectification: have inaccurate or incomplete data corrected.
• →Right to erasure: request deletion of your data in the cases provided for by the GDPR.
• →Right to restriction of processing and right to data portability.
• →Right to object to processing based on legitimate interest, on grounds relating to your particular situation.

Exercising your rights

To exercise these rights, write to contact@legen1.com. You will receive an answer within one month of receipt of your request, extendable by two months where the request is complex.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the Estonian supervisory authority (Andmekaitse Inspektsioon, aki.ee), the publisher lead authority, or with the authority of your country of residence.

Changes

This policy may change to reflect a new processing activity or a new legal obligation. The date of the last update is shown at the top of the page.