Privacy policy
Last updated: August 2026
Data controller
The data controller is ProEngineering OÜ (registry code 12603169), Tallinn, Estonia. For data protection matters: info [at] proengineering [dot] eu.
What data we process
The website has no forms and does not collect data automatically. If you contact us by email, we process your name, email address and the content of your message — only what you choose to share.
Enquiries via leonov.ee/support
The page leonov.ee/support carries a contact form — a separate point of collection with the same data controller. We receive what you wrote, plus your name and a reply contact if you chose to leave them. The contact is yours to pick: an email address, a Telegram username or a phone number for WhatsApp — a number is personal data just as an address is. There is also a “no reply needed” option, and then we store no contact at all. You may attach files — screenshots, logs, documents; they are kept together with the enquiry and for exactly as long. Screenshots and logs often show more than intended, so please check what you send. Please do not send identity documents through this form — passport, driving licence, residence permit: it is an ordinary support mailbox, not a secure channel. If such a document is needed, we will ask for it separately and by another route. The IP address and the time of submission are stored alongside, because without them automated spam cannot be filtered out. The enquiry arrives by email at our mailbox support [at] proengineering [dot] eu and becomes a task in our own issue tracker on our own server; the contents go no further. In addition, a working copy of the message text stays on the website you wrote from — a safety net in case the email does not arrive; it holds no attachments and lives for 30 days, then it is erased. We keep the enquiry and the correspondence about it until it is closed and for 24 months after that, then delete it together with the attachments. While an enquiry is open it is not deleted: unfinished business is work, not storage. Tickets live in a closed tracker that only we can read. The legal basis is the same as for email: steps taken at your request and the preparation of a contract (Art. 6(1)(b) GDPR), while protecting the form from spam is our legitimate interest (Art. 6(1)(f) GDPR). Without a reply address we can read your message but cannot answer it.
Purposes and legal basis
We use the data to reply to your enquiry and to prepare or perform a service contract (Art. 6(1)(b) GDPR), and for our legitimate interest in business correspondence (Art. 6(1)(f) GDPR).
Cookies and analytics
The website uses no tracking cookies and carries no advertising trackers. Visit counts are measured with Umami, an open-source analytics tool hosted on our own server. It uses no cookies, writes nothing to your device, collects no personal data and does not store raw IP addresses. The data is never shared with third parties and is not used for advertising or profiling, so no consent banner is required. Technically necessary data (such as hosting server logs) is processed only to operate and secure the site.
How long we keep it, and what enforces that
A period with nothing to enforce it is a promise, not a rule, so each period below names its mechanism. Email correspondence — as long as needed to reply and maintain the business relationship, then deleted or anonymised; here the mechanism is manual, and we do not hide that: we cannot clean a mailbox automatically. An enquiry through the form — until it is closed and for 24 months after, then deleted together with its attachments; that cleanup is automatic. The working copy on the site you wrote from — 30 days, erased by itself.
Web server logs
The server hosting the site keeps its own technical request logs, as any web server does, and your IP address appears in them. They serve the operation and security of the site; we use them neither for advertising nor for profiling. These logs are managed by the hosting provider, not by us, so we cannot state a retention period for them — and we will not state one until we can enforce it.
Sharing with third parties
We do not share your data with third parties for marketing. Data may be shared only with service providers that support our operations, or where required by law.
Your rights
You may request access to your data, its rectification, erasure, restriction or portability, and object to processing. You may also lodge a complaint with the Estonian Data Protection Inspectorate (AKI, aki.ee).
Changes to this policy
We may update this policy when legislation or our practices change. The current version is always published on this page.