Privacy Policy
Last updated: 02 December 2025
This Privacy Policy explains how CREA-TING OÜ (“we”, “us”, “our”) collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and Estonian data protection laws.
1. Data Controller
CREA-TING OÜ
Registration number: 17341053
E-mail: daniel.gabor@creatingconsult.com
Website: https://creatingconsult.com
2. What Personal Data We Collect
We collect and process the following data:
Data you voluntarily provide
  • Name
  • Email address
  • Company information
  • Phone number (if provided)
  • Any information sent through our contact forms or emails
  • Project details needed to deliver services
Automatically collected data
  • IP address
  • Device information
  • Browser type & version
  • Pages visited
  • Time spent on website
  • We may use Google Ads or similar platforms for advertising or remarketing purposes. These tools may collect anonymized or pseudonymized information for ad performance measurement or audience insights. No personally identifiable information is used for advertising without explicit consent.
3. Legal Basis for Processing
We process your data under the following lawful bases:
  • Contract performance (when you engage our services)
  • Legitimate interest (responding to inquiries, improving website functionality)
  • Legal obligation (bookkeeping, invoicing)
  • Consent (cookies)
4. How We Use Your Data
We process your data to:
  • Respond to inquiries
  • Deliver consulting services
  • Prepare proposals, invoices, and contracts
  • Communicate about ongoing work
  • Improve website experience and functionality
  • Maintain financial and accounting records
We do not sell, rent, or share data with third parties for marketing purposes.
5. Data Storage & Retention
  • Emails, project notes, and proposals: retained for up to 5 years
  • Contracts and invoices: retained for 7 years (legal requirement)
  • Website analytics & cookies: retained as per cookie provider settings
Your data is stored on secure EU-based servers or GDPR-compliant third-party systems (e.g. email provider, accounting software).
6. Data Sharing
We only share your data when necessary:
  • With accountants (for invoicing & compliance)
  • With legal authorities if required
  • With technical service providers (hosting, email, analytics) under GDPR-compliant agreements
7. Your Rights (GDPR)
You have the right to:
  • Access your data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Request a copy of your data
  • Withdraw consent at any time
Contact daniel.gabor@creatingconsult.com to exercise any rights.
8. Security
We implement technical and organizational measures to protect your data.
However, no digital transmission is fully secure; use at your own risk.
9. Changes to This Policy
We may update this Privacy Policy as needed. Updated versions will be posted on this page.
10. Contact Information
If you have questions about privacy or data processing, contact:
daniel.gabor@creatingconsult.com