Document

Privacy notice

Version of 29 September 2026

1. Who we are

This notice explains how YAVKA OÜ (registry code 00000000, Telliskivi 60a/5, 10412 Tallinn, Estonia) processes personal data as a controller under the EU General Data Protection Regulation (GDPR).

It applies to everyone who uses the website yavka.ink and its forms.

2. What we collect

  • Name and contact details: phone number, email address, messenger handle.
  • Project details you enter in the forms: type of task, budget, timing, comment, the address of your site.
  • Technical data: IP address, browser and device type, referrer, campaign tags, cookie data.
  • Messages you send in the website chat and the contact you leave there.
  • Comments on the blog: the name and email you enter (the email is used only to confirm the comment and is never published) and a one-way hash of your IP address to protect the form from spam.

3. Why we process it

  • To answer your enquiry and prepare a proposal.
  • To prepare the express audit you requested.
  • To conclude and perform a contract.
  • To measure website traffic and improve the site.

4. Legal basis

We rely on your consent (Article 6(1)(a) GDPR), given when you submit a form, and on the necessity of processing for entering into and performing a contract (Article 6(1)(b) GDPR). Analytics cookies are set only with your consent (Article 6(1)(a) GDPR): you give or refuse it in the cookie banner and can withdraw it at any time under “Cookie settings” at the bottom of any page.

5. How long we keep it

Form data is kept until the purpose is met, and no longer than three years after our last contact, or until you withdraw consent. Google Analytics keeps event data for 14 months; analytics cookies expire after 13 months.

6. Who else sees it

We do not sell personal data. We share it only with processors needed to run the site and handle enquiries: hosting, email, CRM and web analytics (Google Analytics 4, provided by Google Ireland Limited), all bound by data processing agreements. Where data leaves the EEA, transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses.

7. Your rights

You may request access, rectification, erasure or restriction, object to processing, request data portability and withdraw consent at any time. Write to [email protected] and we will answer within one month.

You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

8. Cookies

Without your consent the site uses browser storage only for its own functions: it remembers your theme, your cookie choice, the draft of an unfinished enquiry and, for the current visit, the campaign tags that brought you here. This data does not leave your browser unless you send an enquiry.

Analytics cookies are set only after you accept them in the banner. Google Analytics 4 uses _ga and _ga_<ID> to tell visits apart and measure traffic; they expire after 13 months. Google Analytics 4 does not log or store IP addresses, and its advertising features are switched off. If you have accepted analytics cookies, an enquiry you send carries the Google Analytics identifier of your browser, so that we can see which channel brought it.

Until you accept, no analytics cookies are set: Google Analytics receives only cookieless signals without identifiers, which it uses to estimate overall traffic.

You can change your choice at any time under “Cookie settings” at the bottom of any page. You can also disable cookies in your browser; the main content stays available.

After you confirm a blog comment, the site sets the yavka_commenter cookie for one year so that your next comments don’t need confirmation again. It contains no data other than a signed identifier and is removed if you clear cookies.

9. Changes

We may update this notice. The current version is always on this page with its date.

This text is a template and must be replaced with a version reviewed by a lawyer, carrying the real details of the controller.