Privacy Policy

Last updated: 2 April 2026 · Effective for Pixelpanter OÜ (registry code 17589178), Estonia

1. Data controller

The controller of your personal data is:

• Legal name: Pixelpanter OÜ
• Registry code: 17589178
• Address: Harju maakond, Tallinn, Haabersti linnaosa, Õismäe tee 112, 13513, Estonia
• Country: Republic of Estonia (European Union)
• Founder / contact person: Taavi Palo
• Email: Pixelpanter.palo@outlook.com
• Website: https://pixelpanter.com

For privacy requests, write to the email above with the subject line “Privacy request”. We will respond within the timeframes required by the GDPR (generally within one month).

2. Personal data we collect

2.1 Data you provide to us

• Contact and enquiry data: name, email address, company or channel name, service interest, message content, and any files or links you send (for example event details or source footage URLs).
• Contract and billing data: billing name, company details, registry or VAT identifiers where applicable, billing address, payment references, and correspondence related to quotes, orders and invoices.
• Project delivery data: creative briefs, brand guidelines, feedback, approvals, and source materials you supply so we can produce photography or short-form video deliverables.
• Support correspondence: emails and messages exchanged during onboarding, production and aftercare.

2.2 Data collected automatically

• Technical and usage data: IP address, approximate location derived from IP, browser type and version, device/OS information, referring URL, pages viewed, and timestamps. This may be collected by our hosting provider’s server logs when you visit the website.
• Cookie / similar technology data: see section 8. This site is primarily a static marketing site; we aim to minimise non-essential tracking.

2.3 Data from third parties

We may receive limited data from payment providers, accounting tools, cloud storage services you use to share footage, or public business registers when needed to verify a company client. We only use such data for the purposes described below.

3. Purposes and legal bases

We process personal data for the following purposes and legal bases under Article 6 GDPR:

• Responding to enquiries and providing quotes — legitimate interests (Art. 6(1)(f)) in operating our business and, where you request a contract, steps prior to entering a contract (Art. 6(1)(b)).
• Performing contracts for event photography, clipping, creator packages and related services — performance of a contract (Art. 6(1)(b)).
• Invoicing, accounting and tax compliance — legal obligation (Art. 6(1)(c)) and contract performance (Art. 6(1)(b)).
• Operating, securing and improving the website — legitimate interests (Art. 6(1)(f)) in providing a secure, functional site.
• Direct communication about our services where appropriate — legitimate interests or consent where required (Art. 6(1)(f) or 6(1)(a)). You may object to marketing communications at any time.
• Establishing, exercising or defending legal claims — legitimate interests (Art. 6(1)(f)).

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. You may object to processing based on legitimate interests as described in section 9.

4. Who we share data with

We share personal data only when necessary:

• Service providers (processors) that help us run the business — for example website hosting, email providers, cloud storage, accounting/invoicing tools, and (where used) payment processors. They may process data only on our instructions and under appropriate agreements.
• Contractors and team members involved in delivering your project (for example editors or a contracted photographer), under confidentiality and data-protection obligations.
• Professional advisers (legal, accounting) where needed.
• Public authorities when required by law (for example tax or court orders).

We do not sell your personal data to third parties.

5. International transfers

Pixelpanter OÜ is established in Estonia (EU). Some tools we use (email, hosting, cloud storage) may process data in other countries, including outside the European Economic Area. Where that happens, we take steps required by the GDPR, such as using providers under an adequacy decision or appropriate safeguards (for example Standard Contractual Clauses), unless a specific derogation applies.

6. How long we keep data

We retain personal data only as long as needed for the purposes above, including:

• Enquiry data: typically up to 24 months after the last meaningful contact, unless a contract follows or you ask us to delete it earlier where legally possible.
• Contract and project files: for the duration of the engagement and thereafter as needed for aftercare, dispute handling and legitimate business records (often up to several years depending on the project).
• Invoicing and accounting records: for the retention periods required under Estonian accounting and tax law (commonly 7 years for certain financial records).
• Server logs: for a shorter operational period set by our hosting environment, unless needed longer for security investigations.

7. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Measures include access limitation, trusted service providers, and careful handling of client source media. No method of transmission or storage is completely secure; if we become aware of a breach affecting your data, we will notify you and the competent authority when required by law.

8. Cookies and similar technologies

This website is a static marketing site. We do not operate a login area and we do not intentionally deploy advertising trackers as part of the core site experience.

• Strictly necessary / technical: hosting infrastructure may set essential cookies or process technical data required to deliver the site securely.
• Third-party content: pages may load fonts or icon libraries from third-party CDNs (for example Google Fonts or jsDelivr). Those providers may receive your IP address and technical request data when assets are fetched. You can limit this with browser settings or extensions.
• Analytics: if we add analytics in the future, we will update this Policy and, where required, request consent before non-essential cookies are set.

You can control cookies through your browser settings. Blocking some cookies may affect site functionality.

9. Your rights under the GDPR

Subject to legal conditions and exceptions, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase data (“right to be forgotten”)
• Restrict processing
• Data portability (where applicable)
• Object to processing based on legitimate interests, including direct marketing
• Withdraw consent at any time where processing is consent-based (without affecting prior lawful processing)
• Lodge a complaint with a supervisory authority

In Estonia, the data protection supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) — website: https://www.aki.ee. You may also contact the authority in your EU/EEA country of residence.

To exercise your rights, email Pixelpanter.palo@outlook.com. We may need to verify your identity before fulfilling a request.

10. Children

Our services and website are directed to businesses and adult professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be highlighted on the website or communicated by email where appropriate. Continued use of the website after an update constitutes awareness of the revised Policy; where consent is required, we will request it.

12. Contact

Questions about this Privacy Policy or our data practices:
Pixelpanter OÜ
Email: Pixelpanter.palo@outlook.com
Web: Contact form

Related document: Terms & Conditions