Privacy Policy

This website (candela.to) is operated by Grauberg Digital OÜ, a company registered in Estonia.

• Registry code: 16797609
• VAT: EE102646210
• Address: Sepapaja 6, 15551 Tallinn, Estonia
• Contact: hello@grauberg.co

Grauberg Digital OÜ is the data controller for personal data processed through this website.

We keep data collection to a minimum. Here is what we process:

• Analytics data — If you accept analytics cookies, we use Datafast to collect anonymous usage data such as pages visited, referral source, browser type, and device type. No personal identifiers are collected.
• Booking data — When you book a consultation through Cal.com, they collect your name and email address on our behalf.
• Email — If you email us, we process your email address and message content to respond to your inquiry.

We process data based on the following legal grounds under GDPR Article 6:

• Consent — Analytics cookies are only loaded after you give consent via our cookie banner.
• Contract performance — Processing booking data is necessary to schedule and deliver our consulting services.
• Legitimate interest — We process email correspondence to respond to inquiries and maintain business relationships.

We use very few cookies. Here is what you need to know:

• Consent preference— We store your cookie choice in your browser's local storage. This is not a cookie and contains no personal data.
• Datafast analytics — Only loaded if you accept analytics cookies. Datafast is a privacy-friendly analytics tool.
• Cal.com— When you visit the Cal.com booking page (external link), Cal.com may set its own cookies. Please refer to Cal.com's privacy policy for details.

You can change your cookie preferences at any time using the "Cookies" link in the footer.

We use a small number of third-party services to run this website:

• Vercel (hosting) — Processes server logs including IP addresses. Based in the US.
• Datafast (analytics) — Processes anonymous usage data, only with your consent.
• Cal.com (booking) — Processes booking information when you schedule a consultation.

Some of our processors are based in the United States. These transfers are covered by Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework to ensure your data is protected.

Analytics data is retained according to Datafast's retention policy. Email correspondence is kept for as long as needed for business purposes. Booking data is retained by Cal.com per their privacy policy.

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Port your data to another service
• Object to processing
• Withdraw consent at any time (this does not affect the lawfulness of prior processing)

To exercise any of these rights, email us at hello@grauberg.co. We will respond within 30 days.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent version.