1. General provisions
This privacy policy (the "Policy") describes how ADLAB OÜ (Estonia; hereinafter "Company", "we") collects, uses, stores, and protects personal data of website visitors and people who contact us for services.
We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Estonian law.
2. What data we collect
We may collect the following categories of personal data:
- Contact data: name, email address, phone number - when you submit forms on the website.
- Technical data: IP address, browser type, visited pages, visit time - through cookies and analytics services (Google Analytics 4).
- Communication data: correspondence content when you contact us by email or messengers.
We do not collect special categories of personal data (racial/ethnic origin, health data, etc.).
3. Purposes and legal basis
We process personal data on the following legal bases:
- Contract performance (Art. 6(1)(b) GDPR): handling requests, invoicing, and service delivery.
- Legitimate interest (Art. 6(1)(f) GDPR): website traffic analysis for service improvement and fraud prevention.
- Consent (Art. 6(1)(a) GDPR): sending marketing materials where explicit consent is provided.
You may withdraw consent at any time by emailing info@adlab.ee.
4. Cookies
The website uses the following cookie categories:
- Necessary cookies: required for basic website functionality and do not require consent.
- Analytics cookies: Google Analytics 4 helps us understand user behavior. Data is anonymized (IP anonymization enabled).
You can manage cookies via browser settings or opt out via the Google Analytics Opt-out Add-on.
5. Data sharing with third parties
We do not sell personal data. Data may be shared with:
- Google LLC (USA) within Google Analytics under EU Standard Contractual Clauses (SCC).
- Hosting and cloud providers required for website operations under data processing agreements (DPA).
- Public authorities only where legally required.
6. Retention periods
- Contact form data: up to 2 years after the last interaction or until consent withdrawal.
- Analytics data: aggregated Google Analytics data retained for 14 months.
- Contract and invoice data: 7 years under Estonian accounting law.
7. Your rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15).
- Rectify inaccurate data (Art. 16).
- Erase data ("right to be forgotten", Art. 17).
- Restrict processing (Art. 18).
- Data portability (Art. 20).
- Object to processing based on legitimate interest (Art. 21).
To exercise your rights, contact info@adlab.ee. We will respond within 30 days. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
8. Data security
We apply technical and organizational measures to protect personal data, including encrypted transfer (HTTPS/TLS), access restrictions, and regular security checks.
Despite these measures, no internet transmission system can be guaranteed 100% secure.
9. Contact information
For questions related to personal data processing, contact:
ADLAB OÜ
Email: info@adlab.ee
Estonia
Data processing contact person: Vladislav Krivorutsko.
10. Policy updates
We may update this Policy. The latest version is always available on this page. The last update date is shown below. For material changes, we may notify you by email (if available).
Last updated: April 1, 2026.
Questions about personal data processing: info@adlab.ee