Privacy

This privacy notice explains how personal data is processed when you use this website or contact Paocai OÜ in a business context.

Website access and server logs

When you access this website, the hosting environment processes technical access data such as IP address, date and time, requested URL, referrer, browser information, and system metadata. This processing is used to provide the website, maintain availability, and protect the service against misuse and attacks.

This website is currently hosted by IONOS SE. The exact technical access data processed at hosting level depends on the IONOS product actually used and its configuration.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and stable operation of this website.

Business inquiries by email

If you contact us by email, we process the information you provide in order to answer your inquiry and, where relevant, take pre-contractual steps. Paocai OÜ currently uses Microsoft 365 / Exchange Online for business email communication. Depending on the context, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

Local storage of the theme preference

If you actively switch between dark mode and light mode, this website stores your selection locally in your browser so the preferred appearance can be restored on a later visit. This storage is not used for analytics, profiling, or marketing purposes.

The preference is stored only on your device and remains there until you change the setting again or clear the website data in your browser.

No marketing trackers or cookie banner

This website does not use a contact form, newsletter signup, non-essential cookies, externally hosted fonts, or embedded third-party marketing scripts. At the current launch state, no cookie banner is planned because no non-essential cookie or marketing technology is used.

IONOS visitor statistics

This site is deployed through IONOS Deploy Now. According to IONOS, visitor statistics may be generated from server logs. IONOS states that these statistics do not create or read cookies, that the IP address is transmitted when a page is requested, anonymized immediately afterward, and then processed without personal reference. The processed information can include referrer, requested pages or files, browser type, operating system, device type, and time of access.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is privacy-conscious reach and usage evaluation at hosting level without adding marketing scripts or client-side trackers.

Recipients

Personal data may be processed by the hosting provider, including for server logs and the visitor statistics available in IONOS, and by Microsoft 365 / Exchange Online as the technical infrastructure used for business email communication. The concrete data location within Microsoft 365 depends on the tenant and service configuration. Any additional processor or any further third-country transfer must be documented here before it goes live.

Retention

Server logs and business inquiry data are retained only for as long as necessary for technical security, communication handling, and legal retention duties. The currently defined retention periods are listed above. If legal retention duties or legal claims require longer storage in a specific case, retention may be extended accordingly.

Your rights

You have the rights granted by the GDPR, including the rights of access, rectification, erasure, restriction, objection, and data portability where the legal requirements are met.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.