Privacy policy

Data controller

Data controller: Ironitia OÜ

Legal entity: Ironitia OÜ

Registered address: Ahtri tn 12, 15551 Tallinn, Harju maakond, Estonia

Privacy contact: xavier [at] ironitia [dot] com

Information collected

When you use the contact form, Ironitia may collect the information you submit and limited technical records needed to deliver the form and protect it from abuse.

• Name, company, professional email and country
• Request category, desired timeframe and message content
• Consent record
• When rate limiting is enabled behind a trusted proxy, a SHA-256 hash derived from the client IP address is held temporarily in process memory for the configured window (15 minutes by default). Hosting access logs and their retention: [TO BE COMPLETED].
• After explicit analytics consent: pages viewed, page titles, referrer, visit times, browser and device information, and the IP address used to send the Matomo request. IP anonymisation is enabled before analytics storage.

Purposes and legal bases

Submitted information is intended to be used to assess the request, respond to it, maintain necessary correspondence and protect the contact service against misuse.

Contact requests are processed to take steps at the requester's initiative before a possible contract and, where applicable, on Ironitia OÜ's legitimate interests in handling B2B enquiries, maintaining correspondence and protecting the service against abuse. Legal obligations apply where required.

Audience measurement is based on consent. Refusing or withdrawing that consent does not affect access to the website.

Recipients and service providers

Personal information is accessible only to authorised persons and the technical providers needed to host the site and deliver contact requests.

Hosting provider, email or transactional delivery provider, n8n or CRM connection, database provider and other subprocessors: [TO BE COMPLETED]

No contact-form data will be intentionally sent to an undocumented third-party service.

Retention

Contact requests and related correspondence are retained only for a defined business, contractual or legal purpose.

Retention periods by data category and deletion process: [TO BE COMPLETED]

Raw Matomo visit data is deleted automatically after 395 days. Aggregated reports are currently retained without automatic expiry.

International transfers

Data hosting and processing locations: [TO BE COMPLETED]

Any transfer outside the European Economic Area and the safeguards used for that transfer: [TO BE COMPLETED]

Cookies and analytics

The site uses one first-party language-preference cookie named "ironitia-locale". It remembers the language selected by the visitor for one year. It uses SameSite=Lax and is marked Secure when the site is accessed over HTTPS.

Ironitia uses self-hosted Matomo 5.12.0 at the same-origin /matomo/ endpoint for audience measurement. Analytics cookies are disabled, IP anonymisation is enabled and the browser's Do Not Track setting is respected.

No Matomo script is loaded and no analytics request is sent until you explicitly accept audience measurement. If accepted, the tracker sends requests only to the same-origin /matomo/ endpoint; no analytics data is sent to an external analytics service.

Your choice is stored in your browser local storage under "ironitia_analytics_consent". You can change or withdraw it at any time through the “Audience measurement preferences” link in the footer.

Your rights

Depending on the applicable law, you may have rights to access, correct, erase, restrict or object to processing, and to receive portable data where relevant. You may also withdraw consent where processing relies on consent.

To exercise your rights, use the contact form or write to xavier [at] ironitia [dot] com and identify the request as a privacy matter. Additional proof of identity will be requested only where reasonably necessary.

You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia — info [at] aki [dot] ee — aki.ee.

Security and sensitive information

Ironitia applies proportionate technical and organisational measures to the website and contact workflow. No internet transmission can be guaranteed to be risk-free.

Do not submit passwords, private keys, customer data, production exports or other sensitive information through the contact form. A suitable exchange method can be agreed separately if an assessment requires protected material.