Privacy Policy

Last updated: 1 July 2025

This Privacy Policy explains how we collect, use, and protect your personal data when you visit xahau.network. We are committed to complying with the General Data Protection Regulation (GDPR) and respecting your rights.

1. Who We Are

The website xahau.network is operated by:

INFTF MTU
Registration number: 80586600
Address: Ringtee 15, Kuressaare, Estonia 93815
Email: [email protected]

INFTF MTU is the data controller for this website.

2. Data We Collect

We may collect the following categories of personal data:

• Usage data (e.g. pages visited, time spent on site)
• Analytics data (e.g. IP address, browser type, device information)

We do not collect personal identifiers like your name or email address unless you actively provide them.

3. How We Collect Data

We collect data using:

• Cookies and similar technologies
  (You are asked to consent to this when you first visit the site.)

• Third-party analytics tools
  (These tools may collect usage information for statistical and security purposes.)

4. Purpose of Data Processing

We use the data we collect for the following purposes:

• Analytics: To understand and improve how our website is used.
• Security: To detect and prevent abuse or malicious activity.

5. Legal Basis for Processing

We process your data under the following legal bases:

• Consent: For analytics and non-essential cookies.
• Legitimate interests: To ensure the security and integrity of our website.

6. Cookies and Tracking Technologies

We use cookies to collect analytics and improve website performance. When you visit our site, a banner allows you to choose whether to accept or decline non-essential cookies.

For more information, please refer to our Cookie Policy (link to be added).

7. Data Sharing

We do not share your personal data with third parties.

8. Data Retention

We retain analytics data for up to 12 months, after which it is deleted or anonymized.

9. Data Transfers Outside the EU

We do not transfer personal data outside the European Union.

10. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at [email protected].

11. Age Limitations

Our website is not specifically intended for children, but we do not impose an age restriction.

12. Supervisory Authority

You have the right to file a complaint with the Estonian Data Protection Inspectorate:

Andmekaitse Inspektsioon
Website: https://www.aki.ee
Phone: +372 627 4135
Email: [email protected]

13. Updates to This Policy

We may update this policy from time to time. The most recent version will always be available on this page, and the date of the last update will be indicated at the top.

For any questions regarding this Privacy Policy, please contact us at [email protected].