Last updated: 6 October 2026

Privacy policy

This page explains how ÕF Verk handles information when you visit verk.ee or contact us.

Who is responsible for your data?

ÕF Verk, a student company at Tartu Jaan Poska Gümnaasium, student-company registration no. 7486, is responsible for processing your data. For all privacy and personal-data enquiries, contact [email protected].

Enquiries and working together

Our form collects your name, email address or phone number, the service you need, your message and, optionally, a budget range. If you email us, we receive your message and contact details. We use this information to reply, ask follow-up questions and prepare a proposal. Providing it is voluntary, but we cannot reply without contact details and information about your request. Please do not include sensitive information or unnecessary personal details about other people.

When you are considering buying a service yourself, processing is necessary to take steps at your request before entering into a contract (GDPR Article 6(1)(b)). When communicating with a business representative, we rely on our legitimate interest in answering business enquiries and arranging work (Article 6(1)(f)). We process contract information to perform the contract and, where required by law, to meet legal obligations (Article 6(1)(c)). Sending an enquiry does not automatically subscribe you to marketing.

Storage and retention

The form sends your enquiry to our email inbox. The website’s own form handler does not create a separate database of submissions. If an enquiry does not lead to work, we keep it for up to 6 months after the last exchange, then delete it. If we work together, we retain necessary correspondence during the contract and afterwards only to the extent and for the time needed to meet legal retention requirements or handle possible claims. Information relevant to a dispute may be retained until the dispute is resolved.

Website security

Hosting and security services may process technical information, such as your IP address, request time, requested URL and browser details, to keep the website reliable and prevent attacks. This is based on our legitimate interest in protecting the website and communications. To limit form abuse, we use a protected identifier derived from the IP address and a short-lived counter with a 10-minute expiry. This is not an advertising or visitor profile. Security logs are kept for the period necessary to detect and resolve security incidents; you can ask us for further details.

Cookies, language preference and analytics

Your selected language is stored in your browser’s local storage under verk-language so that we can show the same language on your next visit. It remains until you change it or clear the site’s browser data; it has no separate automatic expiry. Remembering the language provides a function you selected and is not advertising tracking.

We use Plausible Analytics through Veebimajutus.ee to measure overall website traffic. We see aggregate statistics such as page views, traffic sources and general device and browser information. Plausible’s standard implementation does not use analytics cookies or store visitors’ IP addresses. Technical request information is used to compile statistics; we do not combine it with contact details submitted through the form. Read more about Plausible’s data practices.

Logging into the WordPress administration area uses necessary login and security cookies. This does not mean ordinary visitors must accept analytics or advertising cookies. The current website does not use advertising cookies. If we add tracking technology that requires consent, we will ask for consent before activating it.

Service providers and external links

Data is accessible to people who need it for ÕF Verk’s work and to hosting, email and security providers as necessary to perform their services. Veebimajutus.ee provides website hosting and the analytics integration. We do not sell your contact details.

The maintenance page loads a font from Bunny Fonts (fonts.bunny.net). That request shares technical connection information, including an IP address, with the provider. The main website loads fonts from our own web server. Following an external link, such as an Instagram link, takes you to another service governed by its own privacy terms.

Where processing involves transferring personal data outside the European Economic Area, an appropriate legal basis and safeguard must apply, such as a European Commission adequacy decision or standard contractual clauses. You can ask us by email about the services and safeguards used.

Your rights

Subject to the applicable conditions, you can request access, correction, deletion, restriction of processing and portability of your data. You can object to processing based on legitimate interests for reasons relating to your particular situation. Where processing relies on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. We do not make solely automated decisions about you with legal or similarly significant effects.

To exercise your rights, email [email protected]. If necessary, we will ask only for information needed to verify your identity. We normally respond within one month. For a complex request, we will explain any legally permitted extension and its reason. You may complain to the Estonian Data Protection Inspectorate or bring proceedings before a competent court.

Changes to this policy

We update this policy when the website’s functions or data practices change. The current wording and update date are always available on this page.