Privacy notice
This notice explains what personal data we collect through noolprojekt.ee, why and for how long we keep it, and what rights you have.
Who processes your data
Nool Projekt OÜ, registry code 16183882, Reinu tee 30, 71020 Viljandi, Estonia. For data protection questions, email info@noolprojekt.ee or call +372 5309 1006.
Contact form and emails
When you send an enquiry through the form or email us, we receive your name, email address and message, plus anything you choose to add: phone number, project location and service.
- Purpose: to reply to your enquiry and prepare a quote.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation). If you represent a company, the legal basis is our legitimate interest in replying to business correspondence (Article 6(1)(f)).
- If no contract is concluded: we delete the enquiry no later than three years after our last contact, because clients often come back to us about the same project later (our legitimate interest, Article 6(1)(f)).
- If we conclude a contract: we keep the contract documents and correspondence until claims under the contract have expired. Contracts, invoices and other accounting source documents are in any case kept for at least seven years from the end of the financial year in which the transaction was recorded (§ 12 of the Estonian Accounting Act). Legal basis: legal obligation (Article 6(1)(c)) and our legitimate interest in establishing and defending legal claims (Article 6(1)(f)).
Providing the data is voluntary, but without your name, email and message we cannot reply. The form sends your details as an email to our mailbox; they are not stored on the web server.
Web server logs
The site is hosted by Zone Media OÜ. For each request the server records the IP address, time, requested address and browser details. We use them only to keep the site secure and to track errors. The legal basis is our legitimate interest (Article 6(1)(f)). The logs are deleted automatically within two weeks.
Google Analytics, only with your permission
If you allow analytics in the cookie bar, we use Google Analytics 4. It shows us which pages are viewed, where visitors come from (for example Google search), which device is used and roughly which city the visit comes from. We also count clicks on our phone number and email address and form submissions. According to Google, your IP address is used only to determine approximate location and is not stored in Google Analytics. We cannot see who exactly visited the site. Advertising features are switched off.
- Legal basis: your consent (Article 6(1)(a)). Until you give permission, Google Analytics does not start.
- Withdrawing consent: click “Cookie settings” in the footer and choose “Don’t allow”. We delete the Google Analytics cookies and analytics stops.
- How long: event-level data is kept for 2 months and user-level data for 14 months from the last visit. Aggregated reports (such as monthly visit counts) are kept.
- Processor: Google Ireland Ltd. Analytics is loaded via the Google tag and Google Tag Manager; they too run only after you allow it.
Cookies and browser storage
| Name | Purpose | Expires | Consent needed |
|---|---|---|---|
| nool-nousolek | Remembers whether you allowed analytics (browser storage, localStorage) | 12 months | no, strictly necessary |
| _ga | Google Analytics: distinguishes visitors | up to 2 years | yes |
| _ga_9L84V4NR7N | Google Analytics: remembers the current session | up to 2 years | yes |
Fonts are served from our own server, so opening the site sends no requests to Google servers.
Who receives the data
- Zone Media OÜ: web hosting and server (Estonia).
- Microsoft Ireland Operations Ltd: email (Microsoft 365).
- Google Ireland Ltd: Google Analytics and Tag Manager, only with your permission.
- Public authorities where required by law.
Google and Microsoft may also process data in the United States. Both parent companies participate in the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission. Google's and Microsoft's terms also include the European Commission's standard contractual clauses. We do not sell your data or share it with anyone for marketing.
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.
Your rights
You have the right:
- to know what data we hold about you and get a copy of it;
- to have inaccurate data corrected;
- to have your data erased or its processing restricted;
- to receive the data you gave us in a machine-readable format;
- to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
Right to object: you may object at any time to processing based on our legitimate interest (such as server logs). We will then stop unless we have compelling legitimate grounds to continue.
Email info@noolprojekt.ee and we will reply within one month. If you believe we are violating your rights, you can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee.
Changes
We update this notice when our data processing changes. Last updated 11 October 2026.