Waitlist privacy notice

1. Controller

The controller of your personal data is Kotkatiib OÜ (registry code 16370147, address Arukaskede pst 1, 10915 Tallinn, Estonia). For data protection questions, email privaatsus@hooldusring.ee.

2. What data we collect and why

When you join the hooldusring.ee waitlist, we store your email address, the time you joined and the time we sent you an invitation. We use this data to manage the waitlist and to send you one email when you can join Hooldusring.

Joining is voluntary. Without your email address, we cannot let you know when you can join.

3. Legal basis

We process your email address based on your consent (Article 6(1)(a) of the General Data Protection Regulation, GDPR). You give your consent by entering your address and clicking “Liitu ootelistiga” (Join the waitlist).

To protect the form from abuse, we use a hash of your IP address to limit requests and keep technical error logs. We do this based on our legitimate interest in keeping the service secure (Article 6(1)(f) GDPR).

4. How long we keep your data

The invitation is tied to your email address, so after sending it we keep the address until you create an account with it. When you create the account, we remove the address from the waitlist. If you leave the waitlist before that, we delete the address immediately. In any case, we delete it no later than 12 months after you joined.

For an invitation we have sent, our email log keeps the address, the time it was sent and its delivery status for up to 12 months. We delete the IP address hash within two days and keep error logs for up to 90 days. Deleted data disappears from backups within 30 days.

5. Who processes your data

The following service providers process your data on our behalf and only to the extent necessary:

• Vercel: website hosting (servers in the European Union).
• Supabase: database (Ireland, European Union).
• Mailgun: email delivery (European Union).

Your data is stored in the European Union. If a service provider processes it outside the European Economic Area, for example when providing support, we rely on safeguards approved by the European Commission: the EU-U.S. Data Privacy Framework or standard contractual clauses.

We do not use your address for advertising, sell it or make automated decisions based on it.

6. Your rights

You can leave the waitlist and withdraw your consent at any time by emailing privaatsus@hooldusring.ee. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal.

You have the right to access your data, to have it corrected or erased, to restrict its processing and to receive it in a machine-readable format. You can also object to processing based on our legitimate interest. To exercise your rights, email privaatsus@hooldusring.ee. We will reply within one month.

If you believe we are breaching data protection law, you can lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

7. Scope

This notice applies only to the waitlist. Using the Hooldusring app is covered by a separate privacy policy, available in Estonian.