Legal Document
Privacy Policy
Last updated: June 14, 2026
1. Introduction
Forma22 Agency OÜ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, process, and protect your personal data when you visit our website or contact us. In compliance with the General Data Protection Regulation (GDPR), we act as the Data Controller for your personal information.
2. Data We Collect
We collect personal data that you voluntarily provide to us when filling out the contact form or sending us an email:
- Identity Data: First name and last name.
- Contact Data: Email address.
- Communication Data: The content of your messages, inquiries, and request details.
- Technical & Usage Data: Automatically collected IP addresses, browser types, and navigation paths via analytical cookies.
3. Purposes of Data Processing
We process your data for the following specific purposes:
- To respond to your inquiries and establish communication.
- To provide and manage our strategic consulting, branding, marketing, and IT consulting services.
- To analyze website performance and optimize user experience.
- To comply with legal, tax, and regulatory obligations in Estonia.
4. Legal Basis under GDPR
Our processing of your data is based on the following legal foundations:
- Consent: You voluntarily submit your details via our contact form.
- Contractual Obligation: Processing is necessary to take steps before entering into a service agreement.
- Legitimate Interests: To improve our services, ensure website security, and conduct direct business communications.
5. Data Sharing and Retention
We do not sell, rent, or trade your personal data. We only share it with trusted third-party providers (such as hosting platforms and analytical tools) that adhere to GDPR standards. We retain your contact data for as long as necessary to fulfill the purposes outlined in this policy, or up to 2 years after our last contact, unless required otherwise by accounting or tax laws.
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- The right to access your data and receive a copy of it.
- The right to correct inaccurate or incomplete data.
- The right to request deletion ("right to be forgotten").
- The right to restrict or object to the processing of your data.
- The right to withdraw your consent at any time.
- The right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
7. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us directly at info@forma22.com.
This document is designed to satisfy General Data Protection Regulation (GDPR) standards. As we are registered in Estonia (EU), European data rights apply to all visitors.