Privacy Policy

Last updated: September 20, 2025

This website (margusveeber.com) is operated by Margus Veeber. I take the protection of your personal data very seriously and comply with the provisions of the EU General Data Protection Regulation (GDPR).

‍

Data controller

Margus Veeber

Email: margus@veebermedia.com

‍

Categories of data collected

Payment data
- Payments are processed via Stripe, Inc. (processor). Payment details are transmitted directly to Stripe and are not stored on my servers.
- Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Analytics data
- I use Plausible Analytics, a privacy-friendly analytics tool operated by Plausible Insights OÜ (Estonia, EU). Plausible does not use cookies and does not collect personally identifiable information.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing website traffic).
Contact data
- If you contact me via email, I process your email address and the contents of your message in order to respond.
- Legal basis: Art. 6(1)(b) GDPR (contract-related communication) or Art. 6(1)(f) GDPR (legitimate interest in communication).
Audit intake form
- If you complete the intake form, your responses (including your email address) are stored securely on Notion Labs, Inc. servers (processor, located in the USA with EU Standard Contractual Clauses in place).
- This information is necessary to prepare and deliver the audit and to stay in contact with you regarding the service.
- Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Data retention

Personal data is stored only for as long as necessary to provide the service or as legally required.
Audit intake form data may be retained for the duration of the engagement and up to 12 months after delivery for documentation purposes.

Data sharing

Personal data is not sold or shared with third parties. It is only processed by the service providers mentioned above (Stripe, Notion, Plausible).

Your rights

Under GDPR, you have the right to:

Access your personal data (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR).

Contact

For any privacy-related questions, or to exercise your rights, please contact:

Margus Veeber