📄 Privacy Policy

Arkanet OÜ
Effective Date: 1 March 2026

1. Data Controller

Arkanet OÜ
Registration No. 17436256
Sepapaja tn 6
15551 Tallinn
Estonia
Email: info@arkanet.org

Arkanet OÜ acts as the Data Controller in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Personal Data Collected

We may collect and process the following categories of personal data:

Name and contact information
Email address
Billing information (processed via third-party providers)
Technical data (IP address, browser type, device information)

We do not store full payment card details.

3. Legal Basis for Processing

Personal data is processed in accordance with:

Article 6(1)(b) GDPR – Processing necessary for the performance of a contract
Article 6(1)(f) GDPR – Legitimate interests pursued by the company
Article 6(1)(a) GDPR – Consent, where applicable

4. Purpose of Processing

Personal data is processed for the following purposes:

Delivery of digital products
Customer support and communication
Compliance with legal and accounting obligations
Website functionality, security, and performance

5. Data Retention

Personal data is retained only for as long as necessary to fulfill contractual obligations and comply with applicable legal requirements.

When retention is no longer necessary, data will be securely deleted or anonymized.

6. Third-Party Processors

Payments are processed exclusively through regulated third-party payment providers integrated within authorized distribution platforms.

Arkanet OÜ does not directly process or store full payment card information.

Personal data may also be processed by hosting providers, technical service providers, and platform operators under appropriate data processing agreements.

7. User Rights

Under the GDPR, users have the right to:

Access their personal data
Request correction of inaccurate data
Request deletion of personal data
Restrict or object to processing
Data portability (where applicable)
Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

Requests related to personal data may be sent to:
info@arkanet.org

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented in accordance with GDPR requirements, including the use of standard contractual clauses where applicable.

9. Cookies

This website uses cookies and similar technologies to ensure proper functionality, security, and performance.

For detailed information regarding the use of cookies, please refer to our Cookie Policy.

10. Data Security

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Security practices are regularly reviewed to ensure ongoing compliance with applicable data protection standards.