AILithe OÜ
Privacy notice
Updated 23 October 2026
Who is responsible?
The controller for ailithe.com is AILithe OÜ, registry code 17629676, Tulbi tn 2d-2a, Tartu 50407, Estonia. For privacy enquiries, contact info@ailithe.com.
Data and purposes
The contact form requires your name and email address. Your company or team, selected topics and message are optional. We use the information you provide to answer your enquiry, clarify your needs and prepare a proposal at your request. Without the required contact details the form cannot be submitted; you may also email us directly. Please do not send passwords, health information or confidential information about others.
Legal basis
Steps taken at your request before entering a contract rely on Article 6(1)(b) of the GDPR. Responding to business representatives and general enquiries relies on Article 6(1)(f): our legitimate interest in communicating with prospective customers and running our business. Website and form security also rely on legitimate interests. Sending an enquiry does not subscribe you to marketing.
Technical data and cookies
The web server processes connection data, such as IP address, request time and browser information, to deliver the website and investigate faults. The form uses the necessary session cookie ailithe_contact to prevent forged requests and duplicate submissions. It is not used for advertising or cross-site tracking. Spam protection stores a hash derived from the IP address and submission timestamps on the server. The rate limit covers one hour; rate-limit files older than one day are removed when a subsequent form submission is processed. The website currently uses no analytics or marketing cookies.
Service providers and transfers
Elkdata OÜ (Veebimajutus.ee) hosts our website and email. The form sends enquiries to info@ailithe.com; a copy remains in that mailbox and the email is forwarded to our Gmail mailbox provided by Google. Access is limited to AILithe representatives handling enquiries and providers delivering their services. Google may process data outside the European Economic Area. Its data transfer explanation describes applicable adequacy decisions, the EU–US Data Privacy Framework and standard contractual clauses. We do not sell contact information.
Retention
We retain enquiries and correspondence while resolving them and carrying out necessary follow-up. Further retention depends on whether the data is needed to fulfil a service agreement, comply with a legal obligation or protect legal claims; it is deleted once no longer needed. Security data is retained only as necessary to identify and resolve faults or misuse. The form cookie lasts for the browser session; session-restoration settings may retain it after the browser closes.
Your rights
You may request access, correction, deletion or restriction of your personal data. You may object to processing based on legitimate interests. Data portability applies where the GDPR conditions are met. If processing relies on separately given consent, you can withdraw it for the future. Contact info@ailithe.com; we normally respond within one month. We may need to verify your identity and will notify you of any legally permitted extension. You may complain to the Estonian Data Protection Inspectorate or the supervisory authority in your country of residence.
Automated decisions and updates
We do not use contact-form data for automated decisions or profiling with legal or similarly significant effects on you. Any separate client-project data processing is addressed when providing that service. If website data use changes, we update this notice and its date.