​

1. Data Controller

Castlab Solutions OÜ
Registry code: 17448897
Harju maakond, Tallinn, Kesklinna linnaosa, Viru väljak 2, 10111
Email: castlabsolutions@gmail.com

​

2. Legal Basis

Personal data is processed in accordance with:

• Regulation (EU) 2016/679 (GDPR)

• Estonian Personal Data Protection Act

​

3. Data Collected

We may collect:

• Contact details (name, email, phone)

• Company information

• Billing details

• Technical project files

• Website usage data

We do not collect sensitive personal data.

​

4. Purpose of Processing

Data is processed for:

• Preparing quotations

• Executing contracts

• Accounting and tax compliance

• Customer communication

• Improving website functionality

​

5. Legal Grounds

Processing is based on:

• Contract performance

• Legal obligations

• Legitimate business interest

• Consent (where required)

​

6. Data Retention

Accounting data is retained as required by Estonian law (typically 7 years).

Other personal data is retained only as long as necessary for business purposes.

​

7. Data Sharing

We may share data with:

• Accounting providers

• Logistics partners

• IT service providers

• Authorities when legally required

We do not sell personal data.

​

8. Data Subject Rights

Under GDPR, individuals have the right to:

• Access their data

• Request correction

• Request erasure

• Restrict processing

• Object to processing

• Data portability

Complaints may be filed with the Estonian Data Protection Inspectorate.

​

9. Cookie Policy

​

Our website uses cookies to:

• Ensure proper website functionality

• Analyze traffic and user behavior

• Improve performance

​

Cookies may include:

• Essential cookies

• Analytics cookies

• Functional cookies

​

Users may manage cookie preferences through their browser settings or cookie consent banner.

​

​