Privacy Policy

1. Overview

This Privacy Policy describes how Portata.ai (Portata OÜ) processes your personal data in accordance with the EU GDPR and applicable Estonian laws.

2. Data we collect

• Name and contact details (email, phone)
• Company name and position (where applicable)
• Training/event registration details
• Communications and feedback (emails, forms)
• Billing and payment information

3. Purposes and legal bases

• Service/training management – GDPR Art. 6(1)(b)
• Communication and support – Art. 6(1)(b)/(f)
• Accounting and invoicing – Art. 6(1)(c)
• Marketing of similar services – Art. 6(1)(f)

4. Retention

• Training and registration data: up to 2 years
• Accounting records: up to 7 years
• General inquiries (non-clients): up to 1 year

5. Data sharing

We do not sell or rent data. We may share data with processors (email, hosting, analytics) or public authorities where required by law.

6. International transfers

Some data may be transferred outside the EEA (e.g., to Google or Microsoft). Such transfers use EU Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework.

7. Your rights

You may access, correct, delete, or limit the processing of your data, object to processing, and file a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

8. Cookies and analytics

We use three categories of cookies:

• Essential – for site functionality
• Analytical – e.g. Google Analytics, Plausible (consent-based)
• Marketing – for advertising effectiveness (consent-based)

You can manage preferences via the cookie banner.

9. Security

We use encryption, access control, and backups to protect your data.

10. Changes

The latest version of this policy is always available at https://portata.ai/privacy.