Last updated: 18.11.2025.
(This document is tailored for an Estonian company operating within the EU and compliant with GDPR.)
1. Introduction
Sobrio (“we”, “us”, “our”) provides web design, development, optimization, and maintenance services. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website https://sobrioweb.eu or when you contact us regarding our services.
We are committed to complying with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
2. Data Controller
Sobrio OÜ
Estonia
Email: branko@sobrioweb.eu
Website: https://sobrioweb.eu
We are responsible for handling your personal data.
3. What Personal Data We Collect
We may collect the following types of personal data:
a) Data you provide directly
- Name
- Email address
- Phone number (if voluntarily provided)
- Business details (company name, project information)
- Any information submitted through contact forms or emails
b) Automatically collected data
- IP address
- Browser type and version
- Device type
- Pages visited and time spent on the site
- Cookies (see Cookie Policy)
- Referrer URLs
c) Data related to services
When entering into a contract or discussing a project:
- Billing information
- Project files and technical information
- Communication history
4. Legal Basis for Processing
We process your data based on:
- Art. 6(1)(a) GDPR – Consent (contact forms, newsletter if applicable)
- Art. 6(1)(b) GDPR – Contract (preparing proposals, providing services, communication)
- Art. 6(1)(f) GDPR – Legitimate interest (website analytics, fraud prevention, improving services)
5. How We Use Your Data
We use your personal data to:
- Respond to your inquiries
- Prepare quotes, proposals, and contracts
- Provide web design/development/maintenance services
- Improve website functionality and user experience
- Maintain communication regarding ongoing projects
- Ensure legal and financial compliance
We do not sell or rent your personal data.
6. Sharing Your Data
We may share your data with:
- Web hosting or email service providers
- Payment processors (if applicable)
- Trusted subcontractors (only when necessary for service delivery)
- Legal authorities when required by Estonian or EU law
All partners operate under GDPR-compliant agreements.
7. Data Storage and Retention
Your data is stored on secure servers within the EU/EEA.
We retain personal data only for as long as necessary:
- Inquiry & communication data: up to 12 months
- Client project data: duration of the project + 5 years (legal requirement for accounting)
- Contracts & invoices: 7 years (required by Estonian law)
8. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time (for consent-based processing)
- File a complaint with the Estonian Data Protection Inspectorate
To exercise your rights, contact us at: branko@sobrioweb.eu
9. Security
We use industry‑standard technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
However, no internet transmission is 100% secure, and we cannot guarantee absolute protection.
10. International Transfers
We do not transfer your personal data outside the EU/EEA unless necessary and only with GDPR‑compliant safeguards.
11. Cookies
Our website uses cookies for functionality and analytics. See our Cookie Policy for details.
12. Third‑Party Services
We may use:
- Analytics tools
- Anti‑spam protection
- Embedded content (YouTube, Google Maps, etc.)
These services may collect data according to their own privacy policies.
13. Contact
If you have any questions about this Privacy Policy, contact:
Sobrio OÜ
Email: branko@sobrioweb.eu
14. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a new “Last updated” date.