Privacy Policy

1. Who We Are

This website is operated by SoftPotential OÜ (registry code 14565562), based at Kakumäe tee 226, Haabersti, Tallinn 13516, Estonia. We act as the data controller for personal data collected through this website. For any privacy-related enquiries, please contact us at info@gntpower.com.

2. What Data We Collect

Contact form: name, email address, and message text you submit voluntarily.

Analytics: if you consent, we collect anonymised usage data via Google Analytics 4 (page views, session duration, country, device type). No personally identifiable information is collected through analytics.

Server logs: IP address, browser type, and referral source are automatically processed by our hosting provider (Vercel) for security and performance purposes.

3. Legal Basis for Processing

Contact form: Article 6(1)(b) GDPR — processing necessary to respond to your request; and Article 6(1)(f) GDPR — our legitimate interest in handling business enquiries.

Analytics: Article 6(1)(a) GDPR — your explicit consent, which you may withdraw at any time by clearing your browser's local storage.

Server logs: Article 6(1)(f) GDPR — legitimate interest in maintaining platform security.

4. How We Use Your Data

We use the data we collect for the following purposes:

• Responding to your enquiries submitted via the contact form.
• Analysing website usage patterns to improve our content and user experience (analytics only, with your consent).
• Maintaining the security and performance of the platform.

We do not use your data for automated decision-making or profiling, and we do not sell your personal information to any third party.

5. Third Parties

Vercel Inc. (USA) — website hosting and server infrastructure. Data is processed under standard contractual clauses.

Resend Inc. (USA) — email delivery of contact form submissions. Messages are not retained by Resend after delivery. Data is processed under standard contractual clauses.

Google LLC (USA) — analytics, only if you have given consent. Data is processed under Google's Data Processing Agreement.

6. Data Retention

Contact form messages: retained for a maximum of 12 months from receipt, then deleted.

Analytics data: retained for 14 months in Google Analytics, after which it is automatically deleted.

Server logs: retained by Vercel for up to 30 days.

7. Your Rights

Under GDPR you have the right to: access your data, correct inaccuracies, request deletion, restrict or object to processing, and data portability. You also have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@gntpower.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate ( aki.ee).

8. Cookies

We use the following cookies:

• gntpower_cookie_consent — stores your cookie preference. Expires after 1 year.
• _ga, _ga_* — Google Analytics tracking cookies, set only after your explicit consent. Expire after 14 months.

We do not use advertising, tracking, or third-party social media cookies. You can withdraw your analytics consent at any time by clearing your browser's local storage.