Privacy Policy

Last updated: 9 September 2026

This notice explains what personal data Medial Company collects through the site medialcompany.com, why we collect it, how long we keep it and the rights you have over it. It is written to meet the General Data Protection Regulation (EU) 2016/679.

1. Who is responsible for your data

The controller of the personal data described here is:

The company is established in Estonia, inside the European Union, so this notice and the processing it describes fall directly under Regulation (EU) 2016/679. You can reach us at the address above at any time.

2. What we collect

Data you give us

When you send the contact form on this site we receive the name, email address, company name (optional), the type of project you select and the message you write. Nothing on that form is mandatory except what is needed to answer you.

Data collected automatically

Our hosting provider records standard server logs for every visit — IP address, browser and operating system, the page requested and the time of the request. These logs exist to keep the site running and secure. We do not use them to profile you, and this site carries no advertising or analytics trackers.

3. Why we use it, and on what legal basis

Purpose	Legal basis (Art. 6 GDPR)
Replying to your enquiry and discussing a possible project	Consent — Art. 6(1)(a). You give it with the checkbox on the form.
Taking steps at your request before entering into a contract	Contract — Art. 6(1)(b)
Keeping the site available, and protecting it from abuse	Legitimate interest — Art. 6(1)(f)

We never sell your data, and we do not use it to send marketing you did not ask for.

4. How long we keep it

Enquiries are kept for 24 months from your last message to us, so that we can pick up a conversation where it stopped. If the enquiry becomes a project, the data is kept for as long as the contract requires plus any legal retention period that applies to it. Server logs are kept for a short period by our host and then overwritten. You can ask us to delete your enquiry sooner — see section 7.

5. Who else sees it

Only the people at Medial Company who need it to answer you. Beyond that, your data is processed on our behalf by:

• Our hosting provider, which stores the site and its database.

These providers act on our instructions under a data processing agreement, and may not use your data for their own purposes. We do not disclose your data to anyone else unless the law requires it.

6. Transfers outside the EEA

The server that hosts this site is located outside the European Economic Area. Where your data is transferred outside the EEA it is protected by the European Commission's Standard Contractual Clauses, or by an adequacy decision covering the country in question. You may ask us for a copy of the safeguards that apply.

7. Your rights

Under the GDPR you have the right to:

• Access — ask whether we hold data about you, and get a copy of it.
• Rectification — have data that is wrong or incomplete corrected.
• Erasure — ask us to delete your data where we no longer need it.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive the data you gave us in a machine-readable file.
• Objection — object to processing based on our legitimate interest.
• Withdraw consent — at any time, without affecting what was lawful before.

Reach out through our contact form and we will answer within one month. If you are not satisfied with our answer, you can complain to the data protection authority of the EU country where you live or work.

8. Cookies

This site sets no advertising, analytics or profiling cookies. The only cookies that may be set are the strictly necessary ones our platform uses to keep the site working — for example to remember an administrator's session. Those are exempt from the consent requirement because the site cannot function without them.

9. Security

The site is served over HTTPS, access to the administration area is restricted and kept up to date, and the form is protected against automated abuse. No system is perfect, but we treat the data you send us as data we are responsible for.

10. Changes to this notice

If we change how we handle personal data we will update this page and move the date at the top. Material changes will be announced on the site.