Legal

Privacy policy

Last updated: 27 October 2026

This policy explains how Krugis OÜ handles personal data when you visit this website or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Estonian law.

1. Who is responsible

The controller is Krugis OÜ, registry code 37811170115, VAT EE102688773, Pärnu mnt 139c, Kesklinna linnaosa, 11317 Tallinn, Harju maakond, Estonia. For any privacy question, email info@krugis.com.

2. Scope

This policy covers this website and enquiries sent to us. Our products — Route42, RotaLLM, CueBot and newspipe — have their own privacy terms on their websites, which apply when you use them. Work we do for clients is covered by the contract and data processing agreement with that client.

3. Data we collect

• Emails you send us: your name, email address, company, and anything you include in the message.
• Technical data: when you load a page, our hosting provider records standard server logs — IP address, browser type, page requested, date and time — to keep the site secure and working.

This website has no forms, no user accounts, and no advertising or analytics cookies. We do not sell personal data, and we do not use it for automated decision-making or profiling.

4. Why we use it, and our legal basis

• To reply to your enquiry and prepare an offer — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)), or our legitimate interest in answering business messages (Art. 6(1)(f)).
• To protect the website against abuse and attacks — our legitimate interest (Art. 6(1)(f)).
• To meet legal obligations, such as accounting and tax rules, once we work together (Art. 6(1)(c)).

5. How long we keep it

• Enquiries that do not lead to a contract: up to 24 months after our last contact.
• Client correspondence and accounting records: for as long as Estonian law requires, generally 7 years.
• Server logs: up to 30 days, unless needed to investigate a security incident.

6. Who we share it with

We use trusted service providers to run our email and host this website. They process data only on our instructions and under data processing agreements. Fonts on this website are loaded from Google Fonts, which means your browser sends your IP address to Google when a page loads. We may disclose data where the law requires it.

7. Transfers outside the EU

Where a provider processes data outside the European Economic Area, we rely on an EU adequacy decision or the European Commission’s Standard Contractual Clauses, together with any additional safeguards required.

8. Your rights

You have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. To use any of these rights, email info@krugis.com. We reply within one month.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee, or to the data protection authority in your own EU country.

9. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, access control and limited retention.

10. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version.