Privacy Policy
1. Who We Are
Ecxtrem Industries OÜ ("Ecxtrem", "we", "us", "our") is a private limited company registered in Estonia. Registered address: Ahtri 12, Kesklinna Linnaosa, 10151 Tallinn, Harju Maakond, Estonia. Registry code: 16211087. VAT: EE102365915.
We are the data controller for personal data collected through this website and any products or services we develop and operate.
Data Protection Officer
For all privacy-related enquiries, requests, and complaints: dpo@ecxtrem.com
2. What Data We Collect and Why
2.1 Contact Form Submissions
When you submit an enquiry through our website we collect: first name and last name, email address, company name (optional), phone number (optional), project type and budget range, and project description.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — to respond to your business enquiry.
2.2 Website Analytics
We use Google Analytics to understand how visitors interact with our website. Google Analytics collects data including pages visited, time on site, browser type, device type, and approximate geographic location derived from IP address. IP addresses are anonymised before storage.
Legal basis: Consent (Article 6(1)(a) GDPR) — collected only when you accept analytics cookies via our consent banner.
2.3 Technical and Infrastructure Data
Our website is hosted by Webflow, Inc. Backend systems use Supabase hosted in Frankfurt, Germany (EEA). Standard server logs including IP addresses and request timestamps may be generated automatically as part of normal infrastructure operation.
Legal basis: Legitimate interest — necessary for the secure operation of our services.
3. Data Processors and Third Parties
| Processor | Purpose | Location |
|---|---|---|
| Webflow, Inc. | Website hosting and form submission handling | United States (SCCs in place) |
| Google LLC | Website analytics (Google Analytics) | United States (SCCs in place) |
| Supabase, Inc. | Backend infrastructure and database hosting | Frankfurt, Germany (EEA) |
We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.
4. International Data Transfers
Transfers to Webflow and Google (United States) are governed by Standard Contractual Clauses (SCCs) approved by the European Commission. Supabase infrastructure is located in Frankfurt, Germany — no transfer outside the EEA occurs for that data.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 24 months from date of submission |
| Analytics data | 14 months (Google Analytics default) |
| Server logs | 90 days |
| Cookie consent records | 12 months |
6. Your Rights Under GDPR
To exercise any right, contact dpo@ecxtrem.com. We will respond within 30 days.
- Access (Art. 15) — request a copy of all personal data we hold about you
- Rectification (Art. 16) — request correction of inaccurate or incomplete data
- Erasure (Art. 17) — request deletion where there is no legitimate reason to continue processing
- Restriction (Art. 18) — request that we limit how we use your data
- Portability (Art. 20) — receive your data in a structured, machine-readable format
- Object (Art. 21) — object to processing based on legitimate interest
- Withdraw consent — at any time where processing is consent-based
- Complaint — lodge a complaint with the Estonian Data Protection Inspectorate at www.aki.ee
7. Data Security
We implement appropriate technical and organisational measures including encrypted data transmission (TLS), access controls, and regular security reviews. In the event of a personal data breach posing risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours.
8. Cookies
For detailed information on the cookies we use, see our Cookie Policy.
9. Children
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. Contact dpo@ecxtrem.com if you believe we have done so inadvertently.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top reflects the most recent revision.
