Privacy Notice
Last updated 28 August 2026
This notice explains how Legatarius OÜ processes personal data when you visit this corporate website or contact us.
The public website does not use analytics, advertising trackers, or profiling technologies, and it does not set cookies.
Who is responsible
Legatarius OÜ is the data controller.
Registry code: 17554352
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
Privacy and data-protection questions may be sent to contact@legatarius.com.
When you visit the website
The systems used to host, deliver, and secure the website necessarily receive limited technical information when you request a page. This may include your IP address, request date and time, requested page or path, referring page, browser or user-agent information, and technical response or security information.
This information is processed to deliver the website, maintain its availability, diagnose technical problems, and protect it against misuse and security threats.
The legal basis for this processing is Legatarius OÜ's legitimate interest in operating a reliable and secure website under Article 6(1)(f) of the General Data Protection Regulation (GDPR).
Routine technical logs are retained only for as long as reasonably necessary for website operation, troubleshooting, and security, in accordance with the relevant service provider's retention practices. Information required to investigate a specific security incident or comply with a legal obligation may be retained for longer and is deleted or anonymized when that need ends.
Cookies and external tracking
The public website does not set cookies and does not use browser storage for analytics, advertising, profiling, or preference tracking.
The website's fonts are hosted directly by Legatarius. Loading a page therefore does not make an automatic font request to Google or another external font provider.
When you contact us
If you contact Legatarius by email, we process the email address you use and the information contained in your message in order to respond, manage the correspondence, and, where relevant, take steps requested by you before entering into a contract.
Depending on the circumstances, the legal basis for this processing may be:
- our legitimate interests under Article 6(1)(f) GDPR;
- steps requested by you before entering into a contract under Article 6(1)(b) GDPR; or
- compliance with a legal obligation under Article 6(1)(c) GDPR.
You are not required to provide personal data through this website. If you choose to contact us, we need sufficient information to understand and respond to your message.
Correspondence is retained only for as long as necessary to deal with the matter and to meet any applicable legal, accounting, contractual, or dispute-resolution requirements.
Service providers and international transfers
Personal data may be processed by service providers that support website hosting, content delivery, security, and email services. They receive only the information reasonably necessary to provide those services and are subject to applicable contractual and legal safeguards.
Where a service provider processes personal data outside the European Economic Area, Legatarius OÜ uses a lawful transfer mechanism where required, such as an adequacy decision or the European Commission's standard contractual clauses.
You may contact us at contact@legatarius.com for further information about safeguards applicable to international transfers.
Automated decision-making
Legatarius OÜ does not use automated decision-making, including profiling, in connection with this website or ordinary email correspondence.
Your rights
Subject to the conditions and limitations set out in applicable data-protection law, you may have the right to:
- access personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- receive certain personal data in a portable format;
- object to processing based on legitimate interests.
You may exercise these rights by contacting contact@legatarius.com.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or another competent supervisory authority.
Changes to this notice
We may update this notice if the website's data-processing practices change.
The date shown at the top of this page identifies the current version.