Privacy Policy

Effective Date: 7 October 2026 · Governing Law: Regulation (EU) 2016/679 (GDPR) & Republic of Estonia

1. Data Controller

This Privacy Policy sets out how Konero Europe OÜ collects, processes, and protects personal data in connection with its enterprise systems integration and API automation services.

Company Name: Konero Europe OÜ
Commercial Registry Code: 16925831 (Estonia)
Registered Address: Ülemiste Business Area 2, Tallinn 11415, Estonia
Designated Privacy Contact: hello@koneroeu.com
Supervisory Authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon — Tatari 39, 10134 Tallinn, info@aki.ee)

2. Principles and Lawful Basis of Processing

We process business contact and technical data strictly in accordance with Article 5 and Article 6 of the General Data Protection Regulation (EU) 2016/679:

Performance of Contract (Art. 6(1)(b) GDPR): Processing necessary to deliver agreed engineering services, technical specifications, and SLA commitments.
Legitimate Interests (Art. 6(1)(f) GDPR): Processing professional B2B communications, ensuring infrastructure security, and fraud prevention.
Legal Obligation (Art. 6(1)(c) GDPR): Retention of transactional billing records under Estonian commercial and tax legislation.

3. Categories of Data Collected

We collect only the minimum data required to establish and maintain commercial B2B relationships:

Inquiry & Project Scoping Data: Name, professional corporate email address, organization name, technical requirements, and project scope submitted via our contact forms.
Transaction & Billing Data: Invoicing details, VAT/OSS identification numbers, and payment confirmations processed securely through Stripe Payments Europe Ltd. We never access, store, or process raw credit card numbers.
Technical & Analytical Records: Non-personally identifiable server telemetry (operating system type, referring URL, and page timestamps) recorded anonymously to optimize system performance without persistent profiling.

4. Data Retention and Safeguards

Technical consultation inquiries are retained for the duration of the commercial engagement and for a maximum of 24 months thereafter for warranty reference. Accounting documentation and transaction invoices are retained for 7 years in compliance with the Estonian Accounting Act (Raamatupidamise Seadus).

All stored configurations and client project files are secured with role-based access control, cryptographic authentication, and zero third-party monetization.

5. Third-Party Service Providers

We do not sell, rent, or trade client data. Data processing is shared only with strictly vetted, GDPR-compliant infrastructure sub-processors:

Payment Processing: Stripe Payments Europe Ltd (Ireland), regulated under European financial directives.
Server Infrastructure: EU-based hosting and datacenter facilities adhering to ISO/IEC 27001 standards.

6. Your Statutory Rights Under the GDPR

Under Chapter III of the GDPR, corporate representatives and individuals possess enforceable statutory rights:

Right of access to personal data processed by Konero Europe OÜ (Article 15).
Right to rectification of inaccurate or incomplete records (Article 16).
Right to erasure ("right to be forgotten") where retention is no longer statutory (Article 17).
Right to restriction of processing and data portability (Articles 18 and 20).
Right to object to legitimate interest processing or commercial contact at any time (Article 21).

To exercise any statutory right, submit a written notice to hello@koneroeu.com. Requests are resolved within 30 calendar days without administrative fees.

7. Policy Amendments

We reserve the right to update this policy to reflect legislative updates or adjustments in our technical infrastructure. The current version will always remain accessible at https://koneroeu.com/privacy.html.