Legal
Privacy policy
Last updated: TODO — set on publication
CodeCrafters Automation OÜ, registered in Tallinn, Estonia, operates this website. This policy explains what personal data is collected, why, and what you can ask for.
Who is responsible
CodeCrafters Automation OÜ is the data controller. For any question about this policy or your data, write to contact@codecraftersautomation.com.
What is collected
- Contact form and email. The name, work email, company, area of interest and project summary you choose to send.
- Waitlist requests. The email address you provide for Operations Center updates.
- Server logs. Standard technical request data — IP address, timestamp, requested URL, user agent — written by the web server so the site can be kept secure and working.
Nothing else is collected. There is no account system, no tracking and no profiling.
Why it is used
- To reply to your enquiry and, if relevant, to scope and deliver an engagement.
- To send Operations Center release information if you asked for it.
- To keep the site secure and operating correctly.
Your data is not sold, and it is not used for advertising or profiling.
Legal basis for processing
Under Article 6 of the GDPR, each purpose above rests on a specific basis:
- Replying to an enquiry — legitimate interest, and where an engagement follows, the steps taken before entering a contract at your request (Art. 6(1)(f) and 6(1)(b)).
- Operations Center waitlist emails — your consent (Art. 6(1)(a)). You can withdraw it at any time, and withdrawing is as easy as asking.
- Server logs and site security — legitimate interest in keeping the service available and defending it against abuse (Art. 6(1)(f)).
- Keeping correspondence that documents an engagement — compliance with Estonian accounting and tax obligations (Art. 6(1)(c)).
Cookies and analytics
This website sets no cookies. It does not use local storage, session storage or any other means of storing information on your device, and it contains no analytics, no advertising tags and no tracking pixels.
It also makes no third-party requests. Every stylesheet, font and image is served from this domain — the IBM Plex fonts are hosted here rather than loaded from Google Fonts, specifically so that visiting this site does not disclose your IP address to anyone else.
Because nothing is stored on your device and nothing non-essential is loaded, there is no cookie consent banner: there is nothing to consent to. If analytics are ever introduced, this section will be updated first and a consent mechanism will be in place before anything loads.
Who else processes your data
Deliberately very few parties:
- Hosting — OVH. The site runs on a virtual server operated by OVH within the European Union. OVH processes the server logs described above as part of providing the infrastructure. TODO — confirm the exact datacentre region before publication.
- Contact form — processed in house. Form submissions are handled by our own service on the same server and emailed on. No third-party form provider, no form-analytics service.
- Email — self-hosted mail server. Enquiry email is delivered by a mail server we operate on the same infrastructure.
If any of this changes — an external mail provider, a CRM, a scheduling tool — this section will be updated to name it before it goes live.
International transfers
Your data is processed within the European Economic Area. There is no transfer to a third country, and no mechanism such as Standard Contractual Clauses is required.
Retention
Enquiry correspondence is kept for as long as needed to handle the enquiry and any resulting engagement, plus any period required by Estonian accounting and tax law. Waitlist addresses are kept until you ask to be removed. Server logs are retained only as long as they are useful for security and diagnostics.
Automated decision-making
None. Nothing you send is subjected to automated decision-making or profiling within the meaning of Article 22 of the GDPR. A person reads your message and a person replies to it.
Your rights
Under the GDPR you can request access to your data, correction, erasure, restriction of processing and portability, and you can object to processing. Where processing rests on your consent, you can withdraw that consent at any time without affecting anything done before you withdrew it. Requests go to contact@codecraftersautomation.com and are answered within one month.
You may also lodge a complaint with a supervisory authority — the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) for this company, or the authority in your own country of residence, such as the Polish Prezes Urzędu Ochrony Danych Osobowych (UODO).
Third-party marks
Organization and technology names on this site describe career experience and interoperability. All trademarks remain the property of their owners, and their appearance does not imply endorsement or a partnership.