This Privacy Notice explains how Roksnet Solutions OÜ processes personal data in connection with the public website available at https://roksnet.com.

This Privacy Notice applies to visitors of the public Roksnet website and persons who contact Roksnet through website forms or by email.

This Privacy Notice does not fully cover the use of Roksnet Self-Service, Roksnet Member Directory, Roksnet Trust Services, Roksnet Portal, support services, or other operational components of the Roksnet Framework. Those services may be subject to separate or additional
privacy notices, terms, rules, or service documentation.

If you proceed from the website to register for or use Roksnet Services, the processing of your personal data in that context is governed by the Roksnet Privacy Notice for Services (RPN-Services).

1. Data controller

The controller of personal data processed in connection with the public website is:

Roksnet Solutions OÜ
Business registry code: 12998179
Address: Keevise 10, 11415 Tallinn, Harjumaa, Estonia
Email: support@roksnet.com

2. Personal data we may process

When you use the public website, we may process the following categories of personal data.

2.1 Contact and communication data

If you contact us through a website form or by email, we may process:

• your name;
• your email address;
• your organization name;
• your role or position (if provided);
• the content of your message and attachments;
• related communication metadata (date and time).

2.2 Technical website data

If you contact us through a website form or by email, we may process:

• IP address;
• approximate location (country-level) derived from your IP address;
• browser and device technical information;
• operating system information;
• visited pages and timestamps;
• technical logs used for website security, diagnostics, and service continuity.

2.3 Cookie and similar technology data

We may process data generated by strictly necessary cookies and similar technologies used for security and core website functionality.

3. Purposes and legal bases

We process personal data for the following purposes and legal bases.

4. Legitimate interests pursued

Where processing is based on GDPR Article 6(1)(f), our legitimate interests include:

• keeping the website secure, stable, and available;
• responding to professional enquiries and onboarding requests;
• preventing misuse, spam, and cyber incidents;
• protecting legal rights and handling legal claims.

5. Recipients and service providers

We may share personal data with:

• hosting, infrastructure, and IT service providers;
• cybersecurity, anti-abuse, and technical support providers;
• professional advisers (legal, audit, compliance) where necessary;
• public authorities where required by law.

Service providers may process personal data only under contractual instructions and appropriate confidentiality and security obligations.

6. International data transfers

We process personal data primarily within the EEA.

If personal data is transferred outside the EEA, we apply lawful transfer mechanisms under GDPR Chapter V, such as:

• adequacy decisions; or
• Standard Contractual Clauses and supplementary safeguards, where required.

7. Retention

We retain personal data only for as long as necessary for the relevant purpose:

• enquiry and communication data: up to 12 months after the last communication, unless retention is required for the establishment, exercise, or defence of legal claims;
• technical and security logs: up to 12 months, unless longer retention is required to investigate or document a security incident or to comply with law;
• cookie-related data: according to technical necessity and cookie lifetime settings.

8. Your rights

Subject to GDPR and applicable law, you have the right to:

– request access to your personal data;
– request rectification of inaccurate data;
– request erasure of data;
– request restriction of processing;
– object to processing based on legitimate interests;
– request data portability where applicable;
– withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): https://www.aki.ee/en.

9. Whether providing data is mandatory

Providing data through website forms is generally voluntary.

However, if you do not provide required contact details or message content, Roksnet may be unable to respond to your request.

10. Automated decision-making

We do not use website personal data for automated decision-making producing legal or similarly significant effects under GDPR Article 22.

11. Third-party links

The website may contain links to third-party websites.

Roksnet is not responsible for external websites’ privacy practices, content, or security.

12. Security

We apply reasonable technical and organisational measures to protect personal data.

Please do not submit unnecessary sensitive personal data through the public website.

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time.

The latest version is published on the website.

Contact

Roksnet Solutions OÜ
Email: support@roksnet.com