Privacy policy

1. General information

This privacy policy describes how OÜ Karlskroona (hereinafter “we” or the “data controller”) processes personal data when you visit karlskroona.ee and use its services.

We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

For privacy questions, contact us at info@karlskroona.ee or via the contact form.

2. What data we collect

We only process personal data that is necessary for the specific service or for which you have given consent.

• Contact and inquiry forms: name, email address, phone (optional), company name (optional), message, product reference (if the inquiry relates to a product), language, IP address and submission time.
• Newsletter subscription: email address, consent confirmation, language, IP address and subscription time.
• Website usage (with consent only): analytics data via Google Analytics 4 (GA4) and/or Google Tag Manager (GTM), e.g. pages visited, session duration and device/technical data.
• Technical logs: server logs may temporarily store IP address, browser type and request time for security and troubleshooting.

3. Contact and inquiry forms

When you send us a message via the contact form or product inquiry form, we process the data you provide to respond to your inquiry and maintain business communication.

The legal basis is your consent (checkbox on the form) and/or our legitimate interest in responding to inquiries.

Inquiry data is stored in our database and emailed to the designated contact. Data is retained as long as needed to handle the inquiry and meet legal obligations, but no longer than 3 years unless law requires otherwise.

Submitting an inquiry is not required to use the website, but we cannot reply without the necessary data.

4. Newsletter

When subscribing to the newsletter, we process your email address for marketing messages only if you have given separate consent.

The legal basis is consent. You may unsubscribe at any time using the link in emails or by writing to info@karlskroona.ee.

If we use Mailchimp for newsletter management, your email address is transferred to that provider (United States). Mailchimp processes data under its own privacy terms.

5. Cookies

A cookie is a small text file stored on your device when you use the website. We use cookies in two categories: essential and optional (analytics).

You can change your cookie choices at any time by clicking “Cookie settings” in the page footer. This clears your previous choice and lets you accept or decline again.

• Essential cookies — required for core website functions. They cannot be disabled because the site would not work securely without them. Examples:
• • laravel_session — session for website use (e.g. form security);
• • XSRF-TOKEN — CSRF protection for form submissions;
• • ks_consent — your cookie consent choice (accept / decline);
• • ks-topbanner-* and ks-popup-* — notification dismiss preferences (also stored in browser localStorage).
• Optional analytics cookies — used only if you accept on the cookie banner. Without consent, analytics storage is not activated (Google Consent Mode v2 — default “denied”).

6. Google Analytics 4 and Google Tag Manager

The website may use Google Analytics 4 (GA4) and/or Google Tag Manager (GTM) to understand how visitors use the site and improve our service.

These tools are provided by Google LLC (United States). GA4/GTM may set cookies (e.g. _ga, _ga_*) and collect anonymous or pseudonymous statistics.

Analytics is optional. On the cookie notice you can choose “Decline” so analytics cookies are not activated. If you previously accepted, you can reset your choice via “Cookie settings” in the footer.

More about Google’s data processing: Google Privacy Policy.

7. Data sharing and third parties

We do not sell or rent your personal data. We may share data only with trusted service providers who help operate the website and services:

• web hosting and email service provider;
• Google (Analytics / Tag Manager), if you have consented to analytics cookies;
• Mailchimp (newsletter), if enabled;
• law enforcement or supervisory authorities when required by law.

8. Data retention

We retain personal data only as long as necessary for the purpose or legal obligations. Inquiry data is usually kept for up to 3 years. Newsletter data is kept until you unsubscribe. Analytics data is retained by Google under its terms.

9. Your rights

Under the GDPR you have the right to access your data, request correction or erasure, restrict processing, object, data portability (where applicable) and withdraw consent (e.g. newsletter or analytics).

To exercise your rights, write to info@karlskroona.ee. We respond within 30 days unless law provides otherwise.

If you believe your rights have been violated, you may lodge a complaint with the Estonian Data Protection Inspectorate.

10. Changes

We may update this privacy policy from time to time. The current version is always published on this page with the update date. We will notify you of material changes on the website where possible.