Privacy Policy

Last updated: [15th of September 2025]

This Privacy Policy explains how WISE IT INTERNATIONAL OÜ (“we”, “us”, or “our”), a company incorporated under the laws of Estonia (registration number 16706529), with its registered office at Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152, Estonia, collects, uses, discloses, and protects personal data in connection with the provision of our cloud services, including but not limited to Google Cloud Platform, Google Workspace, Amazon Web Services, and other online services (the “Services”) to clients established within the European Union.

The data controller for your personal data is:

WISE IT INTERNATIONAL OÜ

Reg. No: 16706529

Address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152, Estonia
Email: [info@wiseit.eu]

We may collect and process the following categories of personal data:

• Identification data (name, position, company details).
• Contact details (email address, phone number, business address).
• Payment and billing information (bank account details, invoices).
• Account access data (user credentials, log-in data, security tokens).
• Technical data (IP address, device identifiers, cookies, usage logs).

We process your personal data for the following purposes and based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a) GDPR): where required, e.g. for marketing communications or optional cookies.
• Contract performance (Art. 6(1)(b) GDPR): to provide and manage the Services, create and manage client accounts, and process payments.
• Legal obligations (Art. 6(1)(c) GDPR): to comply with tax, accounting, and regulatory requirements.
• Legitimate interests (Art. 6(1)(f) GDPR): to improve our Services, prevent fraud, and maintain IT security.

The personal data and business data entrusted to us by clients are primarily stored within secure data centers operated by our technology partners, including Google Cloud Platform, Google Workspace, and Amazon Web Services.

• Default Location: Whenever possible, data is stored within the European Economic Area (EEA), such as in data centers located in the European Union (e.g., Belgium, Germany, Finland, Ireland).
• Outside EEA: In cases where data storage or processing takes place outside the EEA (for example, by Google or AWS global infrastructure), we ensure compliance with GDPR by relying on Standard Contractual Clauses (SCCs) or other legally recognized safeguards.
• Backups & Redundancy: To ensure availability and business continuity, data may be replicated across multiple secure locations.

We do not sell or disclose client data to unauthorized third parties. Data is only shared with trusted processors under signed Data Processing Agreements.

We retain personal data only as long as necessary for the purposes described above or as required by applicable laws (e.g. tax laws). Data used for marketing purposes will be retained until consent is withdrawn.

• We may share personal data with trusted third-party providers (cloud service providers, payment processors, consultants) under strict contractual safeguards (Data Processing Agreements).
• Some data may be transferred outside the European Economic Area. In such cases, we ensure appropriate safeguards are applied, such as Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

As a data subject under GDPR, you have the right to:

• Access your personal data.
• Request rectification or erasure of your data.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with a supervisory authority (Estonian Data Protection Inspectorate or your local authority).

We use cookies and similar technologies to operate our website and improve your user experience. You can manage cookie preferences through your browser or our cookie banner. Non-essential cookies will only be set with your consent.

We apply strong technical and organizational measures, including:

• Data encryption at rest and in transit.
• Multi-factor authentication and access controls.
• Continuous monitoring of systems.
• Compliance with industry standards (e.g., ISO 27001, SOC 2 as applicable).

For any questions or requests concerning your personal data, please contact us:

Email: [info@wiseit.eu]