Legal
Privacy Policy
This policy explains how 3AM SaaS OÜ processes personal data when you visit this website or contact us, in line with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
Last updated: 21 October 2026
1. Controller
The controller of your personal data is:
3AM SaaS OÜ
Registry code 16445075, VAT number EE102534487
Ahtri tn 12, 15551 Tallinn, Kesklinna linnaosa, Harju maakond, Estonia
Email: info@3amsaas-ou.com
Phone: +372 6464 514
We have not appointed a data protection officer, as we are not required to. Please send any privacy question to the email address above.
2. What data we process
- Enquiry data: your name, email address and message, and optionally your phone number, company name and selected topic, when you use the contact form or write to us.
- Correspondence and business contact data: information you share with us while we discuss or carry out a project.
- Technical data: IP address, browser type, requested pages and time of access, which our hosting provider records in server logs to deliver and secure the website.
- Consent record: your cookie choice, stored in your own browser.
- Advertising measurement data (only with consent): identifiers set by Microsoft Advertising cookies, pages visited and actions taken on this site after you arrive from one of our Microsoft Advertising campaigns.
We do not ask for special categories of personal data. Please do not include such data in your messages.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry and preparing a proposal | Steps at your request before entering into a contract (Art. 6(1)(b)), or our legitimate interest in replying to business enquiries (Art. 6(1)(f)) |
| Carrying out a contract with you or your company | Performance of a contract (Art. 6(1)(b)) |
| Operating and securing the website, preventing spam and abuse | Legitimate interest (Art. 6(1)(f)) |
| Bookkeeping and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Measuring our Microsoft Advertising campaigns | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
4. How long we keep data
- Enquiries that do not lead to a contract: up to 24 months after our last contact.
- Contract and correspondence data: for the duration of the contract and up to 3 years after it ends, the general limitation period under Estonian law.
- Accounting documents: 7 years, as required by the Estonian Accounting Act.
- Server logs: up to 30 days, unless needed to investigate a security incident.
- Your cookie choice: 12 months in your browser, after which we ask again.
- Microsoft Advertising cookies: see the durations in our Cookie Policy.
5. Recipients and processors
We do not sell personal data. We share it only where needed, with service providers that process it on our behalf under data processing agreements:
- website hosting and server infrastructure providers;
- email and form-delivery service providers;
- accounting and bookkeeping service providers;
- IT, file storage and communication tools we use to run projects.
Microsoft Advertising. If you accept advertising cookies, Microsoft Corporation and Microsoft Ireland Operations Limited receive data about your visit through the Universal Event Tracking (UET) tag. This data is used to measure the results of our ads, and Microsoft may also use it as an independent controller under its own privacy statement. The legal basis is your consent. We may also disclose data to public authorities where the law requires it.
6. Transfers outside the EU
We prefer providers that store data in the European Economic Area. Where data is transferred outside the EEA, including to Microsoft in the United States, it is protected by an adequacy decision such as the EU-US Data Privacy Framework (for certified companies) or by the European Commission's standard contractual clauses.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data erased where there is no longer a reason to keep it;
- restrict or object to processing based on legitimate interest;
- receive data you provided in a portable format;
- withdraw consent at any time, without affecting earlier processing. For cookies, use the "Cookie settings" link in the footer.
To use these rights, email info@3amsaas-ou.com. We reply within one month, as the GDPR requires.
8. Supervisory authority
If you believe we process your data unlawfully, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, info@aki.ee, www.aki.ee (opens in a new tab), or with the authority in your own EU country.
9. Security
We use encrypted connections (HTTPS), access controls and up-to-date software to protect personal data, and give access only to people who need it for their work.
10. Changes
We may update this policy when our services or legal requirements change. The current version is always published on this page with its date.
11. Contact
Questions about this policy: info@3amsaas-ou.com, or by post to 3AM SaaS OÜ, Ahtri tn 12, 15551 Tallinn, Kesklinna linnaosa, Harju maakond, Estonia.