Privacy Policy
Last updated: 23 September 2026
Itronauts values your privacy. This Privacy Policy provides a short and clear explanation of what personal data we collect, why we use it, how long we retain it, and what rights you have regarding your data.
1. Who we are
This website (itronauts.com) is operated by Itronauts OÜ, which is also the controller of your personal data:
Itronauts OÜ
Registry code: 17115552
VAT number: EE102847734
Registered address: Rohuneeme tee 88, Viimsi Parish, Harju County 74013, Estonia
Email: info@itronauts.com
Phone: +372 5816 2450
If you have any questions about how we process your personal data, you can contact us by email.
2. What data we collect and why
| When we collect data | Data we may process | How we use it | Legal basis |
|---|---|---|---|
| When you contact us | name, email address, phone number, company, and information included in your message | to respond to your inquiry and manage further communication | steps taken at your request before entering into a contract or legitimate interests |
| When you book a call with us | name, email address, company, booking time, and any other information you provide | to arrange the meeting and contact you | steps taken at your request before entering into a contract |
| When you use our services | contact details, company information, and information needed to provide the service | to provide services, manage the client relationship, and handle billing | performance of a contract and compliance with legal obligations |
| When you visit our website | IP address, device and browser information, and visit data | to operate the website, maintain security, and analyze usage | legitimate interests or consent, depending on the technology used |
| When you consent to marketing | name, email address, and marketing preferences | to send news, offers, and other marketing information | consent |
Our website and services are intended for companies and business clients and are not directed at children under the age of 16. We do not knowingly collect children's personal data.
3. How long we retain data
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations.
| Data | Retention period |
|---|---|
| Data submitted through contact and booking forms | up to 24 months after the last contact |
| Data related to a client relationship | for the duration of the client relationship and thereafter for as long as required by applicable legal retention obligations |
| Accounting records | as required by applicable accounting legislation |
| Marketing data | until consent is withdrawn |
| Cookie and web analytics data | according to the retention period of the relevant cookie or analytics service |
4. Who we share your data with
We do not sell your personal data.
We may share personal data with service providers only to the extent necessary to provide our services and operate our business. These may include:
- cloud and IT service providers;
- email and communication platform providers;
- video conferencing and booking service providers;
- web hosting and analytics providers;
- accounting and payment service providers;
- other service providers that process data on our behalf.
Service providers may use the data only for the agreed purpose and in accordance with applicable data protection requirements.
5. Transfers outside the European Economic Area
Our hosting and primary analytics providers are located in the European Union. Some of the service providers we use may process personal data outside the European Economic Area. In such cases, we ensure that the transfer has a valid legal basis under the GDPR and that appropriate safeguards are in place, such as an adequacy decision by the European Commission or European Commission-approved Standard Contractual Clauses (SCCs).
6. Data security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Access to personal data is limited to people and service providers who need it to perform their duties.
7. Cookies and web analytics
The Itronauts website uses storage that is necessary for the website to function and, only with your consent, Google Ads marketing cookies. For web analytics we use Plausible, a cookieless service.
Necessary storage – your cookie choice is saved in your browser's local storage (localStorage) under the key "itronauts_consent_v1", or as a first-party cookie of the same name if local storage is unavailable. It holds only the version of the choice, whether marketing is allowed, and when the choice was made. It contains no personal data, does not track you, and persists until you change it or clear your browser data.
Web analytics (Plausible) – Plausible Analytics does not use cookies, stores nothing on your device, and does not process personal data in an identifiable form. Because nothing is stored on your device, no separate consent is requested for it.
Marketing cookies (Google Ads) – the Google Ads conversion measurement script (gtag.js) is loaded, and Google may set cookies on our domain (for example "_gcl_au"), only if you have chosen "Accept all" or enabled marketing in the cookie settings. Before you consent, the Google script is not loaded and no requests are sent to Google's advertising services. We use Google Consent Mode v2, in which the advertising consent signals (ad_storage, ad_user_data, ad_personalization) are denied by default and granted only with your consent.
You can change your choice or withdraw consent at any time via the "Cookie settings" link in the website footer. When consent is withdrawn, a denied consent state is sent to Google immediately, Google Ads cookies stored on our domain are deleted, and the Google script is no longer loaded on the next page load.
Through Plausible we collect aggregated, non-personal information to measure overall website performance and improve the Estonian and English user experience.
- Pages viewed and time spent on the page
- Country (derived from an anonymized IP address at the time of the request; the IP address itself is not stored)
- Referring website or search engine
- Device type and browser (general categories only)
- Custom events: contact form submissions, button clicks, language changes, and blog engagement
8. Your rights
Depending on the circumstances of the processing, you have the right to:
- know what personal data we process about you;
- receive a copy of your data;
- request correction of inaccurate data;
- request deletion of your data;
- request restriction of processing;
- object to processing;
- receive your personal data in a structured, commonly used, and machine-readable format and, where applicable, have it transferred to another controller;
- withdraw your consent at any time when processing is based on consent.
To exercise your rights, email us at info@itronauts.com. We will respond to your request within one month.
If you believe your personal data has been processed unlawfully, you have the right to contact the Estonian Data Protection Inspectorate or your local data protection supervisory authority.
9. Automated decision-making
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
10. Changes
We may update this Privacy Policy from time to time, for example when our services, the technologies we use, or legal requirements change. The current version of the Privacy Policy is always available on this page. Where necessary, we will provide separate notice of significant changes.
11. Contact
If you have questions about how we process your personal data or wish to exercise your data protection rights, email us at info@itronauts.com.