Minu Kindlus

Legal

Privacy policy

Minu Kindlus

Last updated: 20.09.2026

1. Who we are (Data Controller)

This website ("Website") and the exhibitor booking service are operated by:

We are the data controller for the personal data described in this policy — meaning we decide why and how it is processed.

2. What personal data we collect

2.1 Data you give us when booking a spot

When an exhibitor books a place at the fair, we collect:

2.2 Access credentials

We do not create traditional user accounts. Instead, each booking is linked to your email address and a unique access code we generate. This combination lets you view your own booking information. Anyone with both the email and the code can view that booking, so keep the code confidential.

2.3 Data collected automatically

When you use the Website we may automatically collect limited technical data such as your IP address, browser type, and cookie identifiers.

This information is used for purposes such as providing the Website, maintaining its security, preventing abuse, diagnosing technical problems and ensuring reliable operation.

The Website does not use analytics, advertising or other tracking technologies for monitoring your activities across websites.

Where technically necessary for the booking service, the Website may use session information or other browser storage to maintain a secure connection or remember the state of your booking. Such technologies are used only to provide a function you have requested and are not used for advertising or behavioural tracking.

We do not collect payment data through this Website.

3. Why we process your data and our legal basis

Purpose Legal basis (GDPR Art. 6)
Processing and managing your booking; letting you view it via email + code Performance of a contract (Art. 6(1)(b)) / steps taken at your request before entering a contract
Sending booking confirmations, the access code, and service-related emails Performance of a contract (Art. 6(1)(b))
Responding to enquiries you send us Legitimate interests (Art. 6(1)(f)) — handling your request
Keeping records for accounting / legal obligations Legal obligation (Art. 6(1)(c))
Non-essential cookies / analytics Consent (Art. 6(1)(a))
Ensuring Website security and preventing abuse Legitimate interests (Art. 6(1)(f))

4. Who we share your data with (Processors)

We do not sell your personal data. We share it only with service providers ("processors") who help us run the service, under data-processing agreements:

4.1 International transfers

Your booking data stored in our database (Supabase) is hosted within the EEA (Ireland) and is not transferred to a third country.

When we send transactional emails, the data required to deliver them is transferred to Resend in the United States. This transfer is safeguarded by the European Commission's Standard Contractual Clauses (SCCs), incorporated into Resend's Data Processing Addendum, and additionally by Resend's certification under the EU–U.S. Data Privacy Framework.

We may also disclose data where required by law or to competent authorities.

5. Cookies

The Website may use strictly necessary cookies or other browser storage technologies required for the technical operation and security of the Website and booking service. These technologies may be used, for example, to maintain a session, protect the service against abuse or remember a necessary technical state.

Strictly necessary cookies do not require your prior consent where they are technically necessary to provide a service you have explicitly requested.

At present, the Website does not use optional analytics, advertising or marketing cookies.

If we introduce optional cookies or similar tracking technologies in the future, we will update these Privacy Policy and Cookie information accordingly and, where required, ask for your prior consent before such technologies are used. You will also be able to withdraw your consent at any time.

6. How long we keep your data

When data is no longer needed, we delete or anonymize it.

7. Your rights

Under the GDPR you have the right to:

To exercise any of these, contact us at info@turvamess.ee. We respond within one month.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate:

8. How we protect your data

We use appropriate technical and organizational measures to protect personal data, including access controls and encryption in transit. Your booking access code should be kept confidential; anyone with your email and code can view your booking.

9. Children

The Website and booking service are intended for businesses and adults. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. The current version is always available on the Website, with the "Last updated" date at the top. Material changes will be communicated where appropriate.

11. Contact

For any questions about this policy or your personal data: