Effective from: 28.05.2026
Marketing Sharks (“we”, “us”) respects your privacy and is committed to protecting your personal data. This privacy policy describes what personal data we collect, how we use it, who we share it with, and what rights you have under the General Data Protection Regulation (GDPR).
1. Data controller
The controller of your personal data is:
Marketing Sharks
Email: tanel@marketingsharks.ee
Website: marketingsharks.ee
2. What data we collect
We collect personal data only to the extent necessary to provide our services, operate the website, and meet our legal obligations.
2.1 Data you provide to us
- Contact forms and quote requests: name, company, email address, phone number, message content
- Newsletter subscriptions: email address, first name
- Client services and project work: data shared in the course of business communication (billing details, project details)
2.2 Data we collect automatically
- IP address and approximate location
- Browser, operating system, and device type
- Pages visited, referring page, and visit duration
- Data from cookies and similar technologies (see section 5)
3. Purposes and legal basis of data processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Preparing quotes and responding to inquiries | Measures necessary for the performance of a contract (Art. 6(1)(b)) |
| Providing services to existing clients | Contract (Art. 6(1)(b)) |
| Sending newsletters and marketing content | Consent (Art. 6(1)(a)) — you can withdraw it at any time |
| Website operation and analytics | Legitimate interest (Art. 6(1)(f)) |
| Accounting and compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
4. Who we share data with
We do not sell your personal data to third parties. We may share data with the following trusted partners to the extent necessary for them to provide their services:
- Web hosting and IT services (server and backup services)
- Email and newsletter services (e.g. MailerLite, Mailchimp, or similar)
- Analytics and statistics (Google Analytics, Google Search Console)
- Advertising platforms (Google Ads, Meta Ads — only with your consent)
- Accounting and invoicing services (e.g. Merit Aktiva)
- Government authorities where required by law
All partners are required to protect your data to the same standard and to process it only for the agreed purposes.
5. Cookies
The website uses cookies to keep the site working properly and to improve your user experience. We use the following categories of cookies:
- Essential cookies — for the site’s core functions, no consent required
- Analytics cookies — for collecting anonymous statistics (Google Analytics)
- Marketing cookies — for showing targeted advertising (only with your consent)
You can manage your cookie preferences in your browser settings or through the cookie consent banner.
6. Data retention
- Inquiries and contact form data: up to 24 months from the last communication
- Client data: for the duration of the contract + 7 years (Accounting Act)
- Newsletter subscriber data: until consent is withdrawn
- Web analytics: up to 26 months
- Log data: up to 12 months
7. Your rights
Under the GDPR, you have the following rights:
- Right of access — you can find out what data we hold about you
- Right to rectification — you can request that inaccurate data be corrected
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability in a machine-readable format
- Right to object to processing based on legitimate interest
- Right to withdraw consent at any time (e.g. unsubscribing from the newsletter)
- Right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee)
To exercise your rights, contact us by email: tanel@marketingsharks.ee. We will respond within 30 days.
8. Data security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include, among others, SSL/TLS encryption, regular security backups, and access rights management.
9. Data transfers outside the EU
Some of our partners (e.g. Google, Meta) may process data outside the European Economic Area. In such cases, we ensure that transfers comply with GDPR requirements by using Standard Contractual Clauses (SCC) or other appropriate safeguards.
10. Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in legislation, our services, or our practices. We will publish significant changes on the website and, where necessary, notify you directly. We recommend reviewing this page regularly. The date of the latest update to this policy is shown above.
11. Contact
If you have any questions about this privacy policy or the processing of your personal data, please contact us:
Marketing Sharks
Email: tanel@marketingsharks.ee