Privacy Policy

This policy explains how Esti Travel OÜ ("we", "us") handles personal data shared through this website. We work with travel agencies and corporate clients, and we only collect what we need to answer your requests.

Who we are

The controller of your personal data is Esti Travel OÜ, registry code 17355724, VAT number EE102915831, Paavli 5A/1, 10412 Tallinn, Estonia. You can reach us at info@estitravel.com.

What we collect

• Details you send through our forms: your name, company, email address, phone or WhatsApp number, and the information you give about your request (destinations, dates, group size, event details, message).
• Technical data: our hosting provider processes standard technical information such as IP addresses and browser details to deliver and protect the website. Our visitor statistics are collected without cookies and without identifying individual visitors.

Why we use it

We use the details you send us to respond to your request, prepare proposals and communicate with you about them. The legal bases are taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in running our business-to-business communication and keeping the website secure (Article 6(1)(f) GDPR).

We do not sell your data and we do not use it for advertising profiles.

Who processes it for us

• Cloudflare — website hosting, security and cookie-free visitor statistics.
• Resend — delivery of form submissions to our inbox.
• Google (Google Workspace) — our email service.

Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

When we arrange services for you, we share only the necessary details with the relevant suppliers (for example hotels or transport providers), and only once you have asked us to proceed.

How long we keep it

We keep your request for as long as needed to handle it and any business relationship that follows, and we review our records regularly. If a contract follows, statutory retention periods — for example under accounting rules — may apply.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To use these rights, write to info@estitravel.com. You can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in your own country.

Cookies

This website does not use cookies for advertising or tracking. If spam protection is enabled on our forms, Cloudflare Turnstile may process technical device information to tell people and automated programs apart.

Changes

We may update this policy from time to time. The date at the top shows the latest version.