Privacy policy
This policy explains how MOS OÜ processes personal data when you visit our website, write to us, order a service from us or take part in one of our productions.
1. Controller
The controller of your personal data is MOS OÜ (registry code 12901412), Ristiku tn 9-1, 10612 Tallinn, Estonia. For any question about personal data, write to support@mosjan.eu or call +372 5854 7713.
2. What data we process
- Website visits. The website uses no cookies, visitor statistics or other tracking, and loads no third-party scripts or fonts. Our hosting and domain providers process technical data about each request (IP address, time of the request, the page requested and browser details) to deliver and protect the website, and may keep it briefly in server logs.
- Correspondence and calls. When you write to us or call us, we process your name, email address or phone number, the content of your message or call and anything else you give us.
- Clients and partners. For quotes, contracts and invoices we process the names and contact details of contact persons, company details, and order and billing data.
- People taking part in productions. If you take part in one of our productions (for example as an actor, interviewee, performer or crew member), we may process your image, voice and other data. This is agreed in a separate contract or consent that describes the processing in more detail.
3. Purposes and legal bases
- Answering enquiries, making quotes and concluding and performing contracts: Article 6(1)(b) of the General Data Protection Regulation (GDPR).
- Meeting accounting and other legal obligations: GDPR Article 6(1)(c).
- Keeping the website working and secure, business communication, and making or defending legal claims: our legitimate interest, GDPR Article 6(1)(f).
- Where we ask for consent (for example to use your image): consent, GDPR Article 6(1)(a). You may withdraw consent at any time; this does not affect the lawfulness of processing before the withdrawal.
4. Who receives the data
We do not sell personal data. We use the following service providers, who process data on our behalf and on our instructions:
- Google Ireland Limited (Ireland): email (Google Workspace);
- Railway Corporation (USA): website hosting;
- Zone Media OÜ (Estonia): domain and DNS.
We may also share data with our accountant, legal advisers and public authorities where this is needed to perform a contract or required by law.
5. Transfers outside the European Economic Area
Some providers (such as Railway Corporation and Google) may process data outside the European Economic Area, including in the United States. Such transfers rely on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
6. How long we keep data
- We keep correspondence for as long as needed to handle the enquiry, perform the contract or defend legal claims, and then delete it.
- We keep accounting source documents for 7 years, as the Estonian Accounting Act requires.
- Server logs are deleted automatically when the provider’s retention period ends.
- We keep the data of people taking part in productions as set out in the contract or consent. In a finished work it may remain for as long as the work is used.
7. Your rights
You have the right to:
- access your personal data;
- have inaccurate data corrected;
- have your data erased or its processing restricted;
- object to processing based on legitimate interest;
- receive your data in a machine-readable format (data portability);
- withdraw consent you have given.
To use these rights, write to support@mosjan.eu. We reply within one month at the latest.
8. Complaints
If you believe we have breached your rights in processing personal data, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee, info@aki.ee) or a court. Please write to us first so that we can try to resolve the matter.
9. Changes
We may change this policy. The current version is always on this page, and its start shows the date from which it applies.