Last updated: 8 October 2026
This notice explains how NOTESMEDIA OÜ handles personal data on its corporate website and when responding to enquiries. Individual educational services have their own privacy notices.
NOTESMEDIA OÜ is the controller for the processing described here. Registry code: 17095909. Registered address: Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. You can contact us using the enquiry form or at company@notesmedia.ee.
When you use the contact form, we receive your name, email address, selected enquiry category and message. An organisation name is optional. Please include only information needed to answer your enquiry.
The hosting infrastructure processes technical connection information, such as an IP address, request time and browser information, to deliver and protect the website. Cloudflare Turnstile checks browser and device signals to distinguish legitimate visitors from automated abuse. Before sending a message, our server validates its one-time token, hostname and purpose. The form uses short-lived keyed identifiers derived from the connection address, email address and message content to limit repeated or duplicate submissions. It does not use this identifier to track you across websites.
We use enquiries to respond to questions, discuss potential services or cooperation, and manage the resulting correspondence. We process requests to take steps towards a contract under Article 6(1)(b) GDPR. For general correspondence and website security, we rely on our legitimate interests in communicating with visitors and protecting our services under Article 6(1)(f). Where a legal obligation applies, Article 6(1)(c) may apply.
Access is limited to people who need it to handle your enquiry and service providers supporting website hosting and email delivery. An enquiry is sent to our company mailbox. We do not use contact-form messages for advertising or AI model training.
The website is hosted on OVHcloud infrastructure in Milan, Italy. Cloudflare provides DNS, website delivery and security; website requests, including contact-form submissions, pass through its network. Cloudflare may process request data internationally under its data processing terms. We use Google Workspace for company email, including enquiries submitted through this website. Google and its subprocessors may process email data outside the European Economic Area. Google’s Cloud Data Processing Addendum describes its international-transfer arrangements, including applicable adequacy decisions and standard contractual clauses. You can request information about the safeguards applicable to your data by contacting us.
We keep correspondence while handling the enquiry and for as long afterwards as reasonably necessary for the resulting relationship, a legal obligation or the establishment, exercise or defence of legal claims. The appropriate period depends on the purpose and type of correspondence. Form rate-limit records expire after 24 hours and are removed during routine cleanup. The website does not keep a separate database of enquiry messages.
The corporate website does not set analytics, advertising or preference cookies, and it does not include third-party advertising pixels. Language selection uses separate page addresses. The contact form sends enquiries to this website and embeds Cloudflare Turnstile for security. Cloudflare may use essential security technologies; we do not enable Turnstile pre-clearance cookies. A separately operated educational service may use different technologies, described in its own notice.
Depending on the circumstances, you may request access, rectification, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests. Contact us using the form’s privacy category or the email address in the legal notice. We may need proportionate information to verify your identity. You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or another competent supervisory authority.
Providing an enquiry is voluntary. Without a reply email address and enough information to understand the enquiry, we cannot respond through the form. We do not use form submissions to make automated decisions with legal or similarly significant effects.
Links to IMATNOTE and other external sites lead to separately operated services with their own terms and privacy information. We may update this notice when the website or our processing changes; the date above identifies this version.