Privacy & GDPR

How we handle personal data on this website — in plain language, in line with the EU General Data Protection Regulation (GDPR).

Last updated: 22 July 2026

1. Who is responsible for your data

The data controller for this website is Christiansen Consulting OÜ, registry code 10426533, Kakumäe tee 233, 13516 Tallinn, Estonia. For any privacy-related question or request, contact us at jens@christiansen.ee.

2. What personal data we process, and why

When you contact us (by email or phone), we process the contact details and message content you choose to share, in order to respond to your inquiry and, where relevant, prepare an offer or deliver our services. The legal basis is taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business inquiries (GDPR art. 6(1)(b) and 6(1)(f)).

Technical server logs. Our hosting provider automatically records standard technical data about visits (such as IP address, date and time, requested page, and browser type) for security and troubleshooting purposes. This is based on our legitimate interest in keeping the website secure and functioning (art. 6(1)(f)). Log data is kept only as long as needed for these purposes.

Nothing else. This website has no user registration, no newsletter, no analytics trackers, and no advertising. We do not sell or trade personal data, and we do not use your data for automated decision-making or profiling.

3. Cookies and similar technologies

This website does not use tracking, analytics, or advertising cookies. The only items stored on your device are strictly technical:

  • Cookie notice acknowledgement — when you dismiss our cookie notice, a small entry is saved in your browser's local storage so we don't show you the notice on every page. It contains no personal data.
  • Staff login session — a session cookie is set only for our own team members when they log in to the website's administration area. Regular visitors never receive it.

Because none of these are used for tracking, they fall under the "strictly necessary" category that does not require consent — our notice is there to keep you informed.

4. Third-party services

Hosting. The website is hosted by Zone Media OÜ (Estonia), within the European Union.

Embedded videos. Some game pages include YouTube videos. We use YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set advertising cookies unless you actively play the video. When you press play, YouTube (Google Ireland Ltd.) may process data as described in Google's privacy policy.

Fonts. Our main typeface is hosted on our own server. One supplementary typeface is loaded from Google Fonts, which involves your browser transmitting your IP address to Google in order to fetch the font file. No cookies are set by this service.

5. How long we keep data

Correspondence is kept for as long as needed to handle the matter and any follow-up, after which it is deleted or archived in line with legal retention obligations (e.g. accounting law for invoicing-related records). Technical logs are retained by our hosting provider for a limited period for security purposes.

6. Your rights

Under the GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased; restrict or object to processing based on legitimate interest; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, email us at jens@christiansen.ee — we will respond within one month.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with a supervisory authority — in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority of your own EU country of residence.

7. Changes to this notice

If our data practices change, we will update this page and revise the date at the top. Significant changes will be highlighted on the website.