01. General Principles & Scope
Zaikaz Ddital OÜ ("Company", "we", "us", or "our") operating as Zaikaz Ddital values your privacy and is dedicated to protecting your personal data. This Privacy Policy informs you about how we process, collect, safeguard, and disclose personal data when you interact with our website, software systems, or engage our computer programming and technical services.
All processing of personal data is carried out in strict conformity with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR) and the Personal Data Protection Act of the Republic of Estonia.
02. Categories of Data We Collect
Depending on your interactions with our programming and consulting services, we may collect and process the following categories of information:
- Contact & Identity Data: Full name, organizational role, company affiliation, and corporate email address submitted through our dispatch terminal.
- Project & Technical Data: Technical project briefs, architectural requirements, software specifications, and scope descriptions.
- Operational & Telemetry Data: IP addresses, browser user agent, system timestamps, and device metrics required to protect server integrity and thwart cyber attacks.
03. Legal Basis for Data Processing
We process your personal data under the following lawful grounds specified in Article 6(1) of the GDPR:
- Contractual Execution (Art. 6(1)(b)): To take necessary pre-contractual steps upon your inquiry and execute software programming agreements.
- Legal Obligations (Art. 6(1)(c)): Compliance with Estonian accounting, commercial, and tax regulations.
- Legitimate Interests (Art. 6(1)(f)): Maintaining network resilience, cybersecurity, prevention of fraud, and continuous enhancement of our software engineering services.
04. Data Retention & Storage Security
We implement state-of-the-art encryption protocols (TLS 1.3, AES-256) and zero-trust access controls to safeguard data from unauthorized alteration or access. Personal data collected for project inquiries is retained only for the duration necessary to satisfy the purposes set forth herein or to comply with statutory retention terms mandated by Estonian accounting and commercial law (typically 7 years for financial records).
05. Your GDPR Rights
Under the European Union General Data Protection Regulation, you have the following enforceable rights:
- Right of access to your stored personal records (Article 15).
- Right to rectification of inaccurate or outdated information (Article 16).
- Right to erasure ("Right to be forgotten") under qualifying conditions (Article 17).
- Right to restriction of data processing (Article 18).
- Right to data portability in a structured, machine-readable format (Article 20).
- Right to object to processing based on legitimate interests (Article 21).
06. Supervisory Authority & Inquiries
If you wish to exercise your data rights or have questions regarding our privacy mechanisms, direct your inquiry to our data representative at:
You also retain the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee).