MKSN

Privacy policy

Last updated 7 September 2026

The data controller responsible for personal data processing is Mikson Digital OÜ (registry code 17585884, contact: info@mksn.ee).

1. Data We Process

MKSN collects and processes personal information strictly within the following scopes:

  • Inquiry and Contact Records: full name, email address, company affiliation, industry, budget range, and project descriptions submitted via web forms or direct electronic mail.
  • Commercial Customer Data: contractual contacts, corporate billing records, and project correspondence accumulated during commercial engagements.
  • Technical Telemetry: IP addresses, network headers, and anonymized access logs utilized for platform defense and performance monitoring.

2. Legal Bases and Processing Purposes

All processing operations strictly comply with the General Data Protection Regulation (GDPR):

  • Performance of Contract and Pre-contractual Actions (Art. 6(1)(b) GDPR): responding to inquiries, issuing binding proposals, and engineering custom digital software.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): statutory fiscal record-keeping, VAT filings, and compliance with applicable accounting laws.
  • Legitimate Interests (Art. 6(1)(f) GDPR): securing web infrastructure against cyber threats, preventing malicious abuse, and reviewing technical site performance.

3. Authorized Subprocessors and Infrastructure Partners

MKSN does not rent, sell, or commercialize personal data. Trusted third-party processors receive data strictly to the extent required to sustain our technical operations:

  • Cloudflare, Inc.: edge hosting, DNS management, firewall inspection, and Content Delivery Network (CDN) services.
  • Google LLC (Google Workspace): business email transmission, file collaboration, and inquiry storage.
  • Google LLC (Google Analytics 4): aggregated, anonymized user navigation tracking subject to affirmative cookie consent.

4. Data Retention Periods

Personal data is retained solely for the durations necessary to fulfill operational or statutory requirements:

  • Inbound web inquiries that do not materialize into active contracts are preserved for up to 24 months.
  • Contract records, invoices, and accounting documentation are retained for 7 years from the end of the relevant fiscal year pursuant to the Estonian Accounting Act (Section 12).
  • Analytical telemetry retention adheres to standard GA4 settings, capped at a maximum of 14 months.

5. Your Statutory Rights

Under the GDPR, you retain the right to request access to, rectification of, or erasure of your personal data, alongside the right to restrict or object to certain processing activities.

To exercise these rights, email your verified request to info@mksn.ee. If you suspect that your data is processed in violation of data protection standards, you maintain the legal right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn; email: info@aki.ee; website: www.aki.ee).