§01
Controller
BlackUnicorn OÜ · Tornimäe tn 5 · 10145 Tallinn, Estonia (registry code 16604183). General and privacy contact: info@blackunicorn.tech. Our Data Protection Officer is reachable at the same address; the DPO’s name is not published (GDPR Art. 37(7)).
§02
What we collect
Contact form submissions (name, email, company, message) and engagement-related correspondence. Server logs retained 30 days. No third-party trackers, no ad pixels.
§03
Legal basis
Article 6(1)(b) GDPR — contract performance — for engagement data. Article 6(1)(f) — legitimate interest — for prospect outreach, overridable by the rights below.
§04
Retention
Prospect data: 24 months from last contact. Engagement records: 7 years (accounting/professional obligation). Access logs: 30 days.
§05
Your rights
Access, rectification, erasure, portability, restriction, and objection under Articles 15–22 GDPR. Reply SLA is 14 days. Complaints to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
§06
Sub-processors
Website hosting and transactional email are handled by EU-based sub-processors under GDPR-compliant terms, with EU Standard Contractual Clauses for any transfer outside the EEA. The current sub-processor list is available on request.
§07
Cookies
Session cookie only, first-party, strictly necessary. No analytics. We do not show a cookie banner because we do not need consent.