Privacy policy

Controller

Controller

Mervantis OÜ, register code 14412321

Address

Asuvere tee 7-4, Tihemetsa alevik, Saarde vald, Pärnu maakond 86201, Estonia

Email

[email protected]

Data protection officer

Not appointed. Article 37 GDPR does not require one for this processing.

Cookies and tracking

This website sets no cookies and runs no analytics or advertising scripts. Fonts, images and preview videos are served from our own server. No consent banner is needed because nothing on the site requires consent until you choose to play a YouTube video (see below).

Server logs

Visiting the site writes a standard server log entry: IP address, date and time, page requested, referrer and user agent. This is processed under Article 6(1)(f) GDPR, for the legitimate interest of operating and securing the website.

Web server

Operated by Mervantis OÜ on its own infrastructure in the European Union.

Retention

30 days, after which log files are rotated and deleted.

Contact form and email

When you send the contact form, we process the details you enter: name, email address, what you need, your GPU and platforms if you give them, and your message. We also record the time, your IP address (to block abuse) and, if present, the campaign link or referring website that brought you here, so we know which video led to your message. The purpose is to answer your enquiry and, if you ask for it, to prepare an offer. The legal basis is Article 6(1)(b) GDPR (steps before a contract at your request) or Article 6(1)(f) GDPR (answering general questions).

Where it's stored

A log of enquiries on our own server in the EU, written before the notification email is sent so no message is lost.

Notification email

Sent to our mailbox through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), acting as our processor.

Retention

Up to 24 months after our last contact, unless a contract follows. Contract and invoicing records are kept for the period required by Estonian accounting law.

YouTube videos

The previews on this site are short muted clips hosted by us. The full videos are YouTube embeds that load only when you press play. Until then, no data is sent to YouTube. When you press play, the video loads from youtube-nocookie.com and Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) receives your IP address and device data, and may set cookies under its own privacy policy. Pressing play is your choice, and the legal basis is Article 6(1)(a) GDPR.

Recipients

Data is not sold and is not shared for advertising. These processors are engaged under Article 28 GDPR:

Cloudflare, Inc.

101 Townsend St, San Francisco, CA 94107, USA. DNS, CDN, reverse proxy and email routing for this domain; every request passes through Cloudflare, so it processes visitors' IP addresses. Transfers rely on the Standard Contractual Clauses in Cloudflare's data processing addendum and its certification under the EU–US Data Privacy Framework.

Brevo

Sendinblue SAS, Paris, France. Delivers the contact form notification email.

Google

Google Ireland Limited, Dublin, Ireland. Email to [email protected] is forwarded by Cloudflare Email Routing to a Google mailbox, where we read and answer it.

Beyond that, personal data is disclosed only to our accountant for statutory accounting records, and to public authorities where the law requires it.

Your rights

You may request access to your personal data, correction, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest (Articles 15 to 21 GDPR). Write to [email protected] or [email protected]. We answer within one month, as Article 12(3) requires.

You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, aki.ee.

Version

In force since 14 September 2026. If we change how personal data is processed, this page is updated and the date changes with it.