Privacy Policy

Last updated: November 2026

1. Who is responsible for your data

The operator of koguja.ee and data controller is Andrei, a private individual based in Estonia. Contact: info@koguja.ee.

2. What data is processed

• Technical data: IP address, browser and device type, operating system, pages viewed and referring URL. Under the GDPR, an IP address is personal data.
• Cookies and device identifiers — see section 3.
• Correspondence: if you email us, we keep your address and message in order to reply.

The site has no user accounts, comments or forms that collect personal data.

3. Cookies and consent

On your first visit from the EEA, the UK or Switzerland, a consent window is shown (Google's certified consent management platform, TCF). Advertising and analytics cookies are used only after you consent. You can change or withdraw your consent at any time via Privacy & cookie settings (also linked at the bottom of every page).

• Necessary — storing your consent choice and language preference.
• Analytics — Google Analytics 4 (with consent).
• Advertising — Google AdSense and its partners (with consent; without consent, non-personalised or limited ads may be shown).

4. Legal bases (Art. 6 GDPR)

• Analytics and advertising — your consent (Art. 6(1)(a)).
• Operating and securing the website, replying to emails — legitimate interest (Art. 6(1)(f)).

5. Google AdSense

This site uses Google AdSense, an advertising service provided by Google Ireland Ltd / Google LLC. Google and its partners may use cookies to serve ads based on your visits to this and other websites. Learn how Google uses data: policies.google.com/technologies/partner-sites. You can manage ad personalisation in Google Ad Settings or at youronlinechoices.eu.

6. Google Analytics

We use Google Analytics 4 to understand which parts of the catalog are useful to visitors. GA4 does not log or store IP addresses. Data is retained for 14 months. You can disable analytics via the consent window or the browser opt-out add-on.

7. Transfers outside the EU

Google may process data in the United States. Such transfers take place under the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

8. Retention

• Google Analytics data — 14 months.
• Email correspondence — up to 2 years after the last message, then deleted.
• Server logs — up to 30 days.

9. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy;
• have your data corrected or erased;
• restrict or object to processing;
• data portability;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• lodge a complaint with the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon (aki.ee).

To exercise your rights, email info@koguja.ee.

10. Children

This website is not directed at children under 13, and we do not knowingly collect their data.

11. Changes

When this policy changes, we update the date at the top of this page.