Privacy Policy

Who is responsible

FIDUMAR OÜ is the controller of personal data collected through this website. Address: Kase tn 68-2-218, 12012 Tallinn, Estonia. For privacy questions and requests, email info@fidumar.eu.

What we collect

When you submit an enquiry, we receive your name or company name, email, any phone number or other contact details you provide, shipment or spare parts requirements, locations, timing, urgency, additional information and the files you attach. Technical information such as IP addresses and request logs may also be processed to operate and protect the website. Please send only relevant information and avoid sensitive personal data or unrelated information about other people.

Why we use your information

We use enquiry details to assess your needs, prepare a quotation and communicate with you. When you enquire for yourself, the basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)). For business representatives and other business correspondence, it is our legitimate interest in answering enquiries and organising services (Article 6(1)(f)). Our legitimate interest in protecting the website and preventing abuse supports security processing. Where applicable, records needed to meet legal obligations are processed under Article 6(1)(c). We do not use the request form to subscribe you to marketing.

Email delivery and access

Requests and attachments are sent to info@fidumar.eu or the company’s authorised recipient mailbox. The website does not maintain a separate archive of request content or attachments. They are processed for email delivery and remain in company email. Access is limited to people who need the information to handle your enquiry. Hosting and mail services are provided through Zone Media OÜ (Zone.ee); authorised technical support providers may process information as needed to maintain the service. Relevant information may be shared with selected carriers or suppliers where necessary to respond to or fulfil your request, and with authorities when required by law.

How long information is kept

Enquiries that do not lead to an order, including their attachments, are kept in company email for up to 12 months after the last communication and then deleted by the company. The website does not automatically delete mailbox messages. Records concerning completed orders are retained for as long as needed to fulfil the contract, meet applicable accounting and other legal obligations, or establish, exercise or defend legal claims. Temporary delivery references expire after 24 hours; other application security records expire according to their short operating windows and are removed by periodic cleanup. Hosting logs and backup copies follow the service provider’s retention arrangements; deletion of a mailbox message may not immediately remove it from backups.

Service providers and international processing

Service providers may use authorised subcontractors. Where processing involves a transfer outside the European Economic Area, applicable GDPR safeguards are required, such as an adequacy decision or standard contractual clauses. You may contact us for information about relevant providers and transfer safeguards. Information about Zone’s processing terms is available on its data protection page.

Cookies, statistics and automated decisions

We use optional first-party website statistics to understand visitor and page counts, traffic sources, advertising channels, countries and device categories and how often visits lead to an enquiry. Visit measurement starts only after you choose Allow in Website statistics. Its legal basis is your consent (GDPR Article 6(1)(a)). You can refuse or withdraw it using Statistics preferences in the footer; sending an enquiry does not require analytics consent. No advertising trackers or external analytics service are used.

After consent, a secure first-party cookie (__Host-fidumar-analytics) contains a random identifier for a visit session. It expires 30 minutes after the last measured event. Temporary session records use a hash of that identifier, entry-source category, language, approximate country and device category, plus page and form counters; raw IP addresses, full referral URLs, names, email addresses, enquiry text and attachments are not stored in statistics. Technical request information is still processed for security and hosting as described above. Countries are estimated locally from the connection IP using a bundled DB-IP database; no visitor IP is sent to DB-IP. Country results are approximate and can be affected by VPNs or proxies. To count distinct browsers over a selected period, we retain pseudonymous browser hashes alongside daily summaries for up to 90 days. These hashes are not linked to enquiry content, and raw browser identifiers are not stored on the server. Visitor counts describe browsers, not identified people. Daily statistics and the associated hashes are retained for up to 90 days. Expired session records and old summaries are removed during subsequent website processing. Accepted email requests are counted in aggregate as part of running the enquiry service, including when visit measurement is refused.

With your consent, a random browser identifier is saved in localStorage for up to 90 days after the last measured event to recognise repeat visits. Declining or withdrawing statistics removes this identifier from your browser and stops future measurement. Statistics already lawfully collected are retained only for the stated period. Your statistics choice is saved in your browser’s local storage for 180 days solely to remember your preference. The administrator area uses an essential secure session cookie lasting one hour. Initial setup and administrator registration use separate essential cookies lasting up to ten minutes. We do not make decisions about your enquiry solely by automated processing or use statistics to make decisions about individual visitors.

Your choices and rights

Providing enquiry information is voluntary. Without the required contact details and a description, we cannot process the request through the form; you can contact us by email instead. Subject to the applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Email info@fidumar.eu; we may need to verify your identity. You may also complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, or your local competent supervisory authority.

Social media links

This website may link to LinkedIn, Instagram and Facebook. We do not embed their widgets. Following a link opens a third-party website, where that platform’s privacy terms apply.

Changes to this policy

We update this policy when our services or processing practices change. The date below identifies the current version.