Privacy policy

1. Controller

Moccca Consulting OÜ, Tornimäe tn 7-43, 10145 Tallinn, Harjumaa, Estonia, email: management@moccca.com. We are not legally required to appoint a data protection officer; please send any data protection questions to this address.

2. In short

This website sets no cookies, uses no tracking or analytics tools, stores nothing in your browser and loads no fonts, videos or scripts from third-party servers. We only process personal data when you write to us or book an appointment, and for technical operation.

3. Hosting and server log files

The website runs on a server of Hostinger International Ltd. (Larnaca, Cyprus) in a data centre in Frankfurt am Main, Germany. Hostinger processes data as a processor under Art. 28 GDPR.

For every request the web server logs the IP address, date and time, requested address, amount of data transferred, referrer and browser identifier. This is necessary for secure and stable operation, for example to fend off attacks (Art. 6(1)(f) GDPR). Log files are deleted automatically after 14 days.

The language shown on your first visit follows your browser's language setting; this information is not stored.

4. Contact form and email

If you use the contact form, we process your name, email address, company, selected topic and message in order to answer your request. The details are not stored in a database but sent directly as an email to our sales mailbox. The same applies if you email us directly.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete the message once it has been dealt with, unless statutory retention obligations apply.

For email we use Microsoft 365 by Microsoft Ireland Operations Ltd. (Dublin, Ireland) as a processor. A transfer to Microsoft Corporation in the USA cannot be ruled out; it is based on the adequacy decision for the EU-US Data Privacy Framework and additionally on standard contractual clauses.

5. Appointment booking with Microsoft Bookings

“Book an appointment” takes you to our booking page on Microsoft Bookings (Microsoft Ireland Operations Ltd.). There we process the details you enter for the appointment, such as name, email address, phone number and notes, in order to arrange and hold the meeting (Art. 6(1)(b) GDPR). The booking page is a Microsoft service; Microsoft's privacy notice applies in addition. For transfers to the USA see section 4.

6. Downloads and videos

Presentations for download and the videos on this website are hosted on our own server. Retrieving them only generates the log data described in section 3.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15 to 21 GDPR). You can withdraw any consent at any time with effect for the future.

You may lodge a complaint with a data protection supervisory authority, for example in the EU member state where you live. The authority responsible for us is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, www.aki.ee.

We do not use automated decision-making, including profiling.