Spinium

Privacy Policy

Language. This policy is written in English. Translations are provided for convenience; where a translation and the English text differ, the English text prevails.

This policy describes how Spinium Property Management OÜ ("Spinium", "we") handles personal data, meaning information relating to an identified or identifiable natural person as defined in the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. It covers the spinium.com website and our dealings with clients, prospective clients and other external parties. It does not cover information that is not personal data.

Controller

The controller is Spinium Property Management OÜ, registry code 12916135, Haapsalu, Läänemaa, Estonia. The person responsible for data protection matters is Timo J. Rinne. Contact: gdpr@spinium.com.

The spinium.com website

spinium.com is a static information site. It has no user accounts, forms or other interactive features, and it does not use cookies, analytics or third-party tracking. If you choose a language, that choice is kept in your own browser's local storage so the site can remember it. It is never transmitted to us or to anyone else, and you can clear it at any time through your browser.

Business inquiries

Messages sent to us are handled in confidence and used only to respond to them and, where a business relationship follows, to conduct it.

Client data

In the course of our work we process personal data of clients, their representatives and contact persons, such as names, business contact details and the contents of our correspondence. We do this for operational, financial and legal purposes: to deliver and administer our services, to invoice and keep accounts, and to meet our legal obligations and protect our legal interests. The legal bases are the performance of a contract, compliance with legal obligations, and our legitimate interest in running our business. We keep this data for as long as these purposes require.

Some services may require identifiable personal data beyond ordinary business needs. In such cases we ask for consent separately, and consent is then the legal basis for that processing. Consent can be withdrawn at any time by writing to gdpr@spinium.com. Withdrawal does not affect processing that took place before it.

Where data is kept

We keep personal data within the European Union, the European Economic Area and the United Kingdom, where the GDPR or the UK GDPR applies. Exceptions are made only where a client contract explicitly provides for them.

Your rights

Under the GDPR you have rights concerning your personal data, including the rights of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, or to ask any question about this policy, write to gdpr@spinium.com. We respond within the time limits set by the GDPR.

Supervisory authority

The competent supervisory authority for GDPR matters in Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Effective date

This policy applies from the date of its publication.

Published on 12 September 2026.