Privacy policy

This policy explains how Ferial OÜ ("we", "us") processes personal data when you use this website (ferial.eu) and when you contact us by email. It is written to align with the EU General Data Protection Regulation (GDPR) and related Estonian law.

Last updated: 4 April 2026

1. Controller

The controller responsible for processing is Ferial OÜ, Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. Registry code: 17317853. Email: feriel.estonia@gmail.com.

2. What data we process

Depending on how you use the site, we may process:

• Website visit (technical data): When you load pages, the hosting infrastructure typically processes technical information such as IP address, date and time of the request, browser type, and referrer. We use this data to deliver the site securely and to diagnose errors.
• Email correspondence: If you email us, we process the sender address, message content, and metadata your mail provider attaches (for example timestamps and routing headers).
• Theme preference (local storage): If you use the light/dark toggle, your choice may be stored in your browser's localStorage under the key ferial-theme. This stays on your device and is not sent to our servers by the site itself.

We do not use third-party advertising cookies or social trackers on this site as shipped.

3. Purposes and legal bases (GDPR Art. 6)

• Providing the website: legitimate interests (Art. 6(1)(f)) in operating an informative business presence and keeping the service secure and available; where strictly necessary for security, also supporting our legitimate interest in fraud and abuse prevention.
• Answering your enquiry: pre-contractual steps at your request or legitimate interests in responding to business contacts (Art. 6(1)(b) or (f)); where your message relates to an existing or future contract, performance of a contract (Art. 6(1)(b)).
• Legal obligations: where we must retain certain information for tax, accounting, or regulatory reasons (Art. 6(1)(c)).

4. Hosting and processors

The website is hosted by Vercel Inc. This deployment is configured to run in the Frankfurt, Germany (FRA1) region. Vercel acts as a processor under GDPR Art. 28. Vercel may use additional subprocessors or infrastructure outside this region as described in Vercel's documentation, privacy policy, and Data Processing Agreement. Email to us is processed by your email provider and ours (for example Google, if you use Gmail) under their respective terms.

5. Transfers outside the EEA

Where personal data is transferred to countries outside the European Economic Area (for example if a processor is established in the United States), we rely on appropriate safeguards such as EU Commission Standard Contractual Clauses or an adequacy decision, as required by GDPR Chapter V, as offered in our processor agreements.

6. Retention

• Server logs: retained for approximately one hour in line with our hosting configuration, unless longer retention is needed for a specific security or abuse investigation.
• Business email: kept as long as needed for the conversation and any resulting contract, then according to statutory retention periods (e.g. accounting).

7. Your rights

Under the GDPR you may have the right to:

• access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18)
• data portability (Art. 20), where applicable
• object to processing based on legitimate interests (Art. 21)
• withdraw consent where processing is based on consent (Art. 7(3))
• lodge a complaint with a supervisory authority, in Estonia the Data Protection Inspectorate (Andmekaitse Inspektsioon): aki.ee

To exercise your rights, contact us at the email address in section 1.

8. Cookies

This site does not set non-essential cookies for analytics or marketing in the default configuration. Essential technical storage may be used by your browser or hosting layer as needed to serve pages. If you add analytics or embeds later, update this policy and, where required, implement consent in line with the ePrivacy Directive / national implementation.

9. Changes

We may update this policy when our processing or legal requirements change. The "Last updated" date will be revised accordingly.