We collect the minimum required to respond and operate responsibly.

Data controller

Entity

Carmentara OÜ

Registry code

17481676

Registered office

Tallinn, Estonia

Contact

hello@carmentara.com

What we collect

Contact submissions. When you use the contact form we collect your name, email address, the track you selected (AI transformation, Digital products, or Partnership), and the message you choose to send. We do not ask for or store additional personal data.

Analytics. If you accept analytics cookies, we record aggregate, pseudonymised usage (page views, referrer, device type) via Umami. Vercel Speed Insights records anonymous performance metrics without cookies. No third-party advertising trackers are loaded at any time.

Why we collect it

Contact data is used solely to evaluate and reply to partnership, talent, or investor inquiries. Analytics data is used to understand which sections of the site are useful and to detect performance regressions.

Lawful basis (GDPR Article 6). Contact messages are processed on the basis of our legitimate interest in responding to inbound enquiries. Analytics is processed on the basis of your consent, which you may withdraw at any time via the cookie banner.

Who processes it

We rely on a small number of EU/EEA or DPA-bound processors: Vercel (hosting), Resend (transactional email delivery for contact form), Umami Cloud (analytics, if consented). We do not sell, rent, or share personal data with third parties for marketing purposes.

Retention

• Contact messages: retained for up to 24 months after last correspondence, then deleted.
• Analytics: aggregate data retained up to 24 months; no individual profile is kept.
• Server logs: retained by Vercel per their standard retention (typically ≤ 30 days).

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. To exercise any of these rights, email hello@carmentara.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the supervisory authority in your country of residence.

Cookies

The site loads no cookies before you interact with the cookie banner. Declining analytics keeps the site fully cookie-free. Necessary functionality (theme preference) uses localStorage, which is not transmitted to the server.