Privacy Policy

1. Privacy at a glance

This website is a portfolio. It contains no analytics tools, no advertising networks and no contact form. Only what is technically necessary to operate the site is processed, and that is exactly what is described here.

2. Data controller

FAPRIMO OÜ

Christian Saur

Sepapaja tn 6

15551 Tallinn

Harju Maakond

Estonia

Email: office@faprimo.com

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

3. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit the site, personal data, in particular your IP address, is processed on Vercel's servers. For details, see Vercel's privacy policy: vercel.com/legal/privacy-policy.

The legal basis is Art. 6 (1) (f) GDPR. We have a legitimate interest in the reliable and secure provision of this website.

For the transfer of personal data to the USA we rely on the European Commission's Standard Contractual Clauses and on the EU-U.S. Data Privacy Framework.

4. Content management (Sanity)

The content of this website is managed with Sanity (Sanity AS, Dronning Eufemias gate 42, 0191 Oslo, Norway). For details, see Sanity's privacy policy: sanity.io/legal/privacy.

One point matters for you as a visitor, and we name it precisely: videos, in particular the background video on the homepage together with its poster image, are delivered directly from Sanity's servers. Your browser connects to Sanity for this and transmits your IP address in the process.

Images in text, on cards and in the case studies behave differently: they are delivered through Vercel's image optimisation, and no connection from your browser to Sanity occurs for them. The exception is the poster image of a video: it belongs to the video technically and is loaded directly from Sanity together with it.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing content that can be maintained.

5. General information and mandatory disclosures

Storage duration

Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose of processing no longer applies. If you assert a legitimate request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible grounds for storing it.

Withdrawal of your consent

Many processing operations are only possible with your express consent. You may withdraw consent already given at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint with a supervisory authority

In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The competent authority for the controller is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn). This right exists without prejudice to any other administrative or judicial remedy.

Access, rectification and erasure

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and where applicable a right to rectification or erasure of this data.

Restriction of processing

You have the right to request the restriction of the processing of your personal data.

Data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.

6. Data collection on this website

Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR; we have a legitimate interest in the technically error-free presentation and the security of this website.

Cookies

This website sets no cookies for analytics or advertising purposes. There is therefore no consent banner. There would be nothing for you to consent to.

A single cookie is set, and only if you enter an access code for a protected case study: "__Host-projektzugang". It records nothing but the fact that the code was valid, so that you do not have to enter it again on every page. It contains no personal data, is not transmitted to third parties, is bound to this website and expires at the end of the session.

This cookie is strictly necessary to provide a function you have explicitly requested. The legal basis is Art. 6 (1) (f) GDPR in conjunction with § 25 (2) no. 2 TDDDG.

You can configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude them generally, or to delete them automatically when the browser is closed. If this cookie is rejected, entering an access code will not work.

Contact by email

If you contact us by email, your details including the contact data you provide will be stored by us in order to handle your enquiry. We do not pass this data on without your consent.

Processing takes place on the basis of Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling enquiries addressed to us effectively (Art. 6 (1) (f) GDPR).

7. Fonts

This website does not load any fonts. It uses only the fonts already present on your device. There is therefore no connection to Google Fonts or any other font provider, and no data is transmitted for this purpose.

8. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services. The new version will apply to your next visit.

Last updated: 12 August 2026