Privacy Notice ‘GoodZone’

Last update 09/12/2021

We are GoodZone, (hereinafter GoodZone will be referred to as “we” and “our”) care about your personal data, and we do everything to protect it. This Privacy Notice was created to help you to understand how your personal data is collected, stored and processed and what happens if you use our Website.

For us, you, as a data subject, can be a visitor or user.

Category of data subject



All persons who visit our website.


Visitors who filled our forms.

Context of this Privacy Notice:

Purpose of this Privacy Notice

Who we are

Scope of application

Personal data we process

Period of data storage

Sharing data with third parties

Your privacy rights

Transfer of data outside the European Economic Area

The use of cookies


  1. Purpose of this Privacy Notice

Privacy Notice is a document, practically a statement of us as a data controller to you (data subject) that describes how we collect, use, retain and disclose personal information.

Our Privacy Notice applies only to our Website.

  1. Who we are

Data controller

GZ Limited OÜ, registration number: 16132100


Estonia, Tallinn, Harju county, Kesklinna district,  Vesivärava street 50-201, 10152

Email - for general questions - for privacy questions

  1. Scope of application

This Privacy Notice applies to our website and data that we can collect via Linkedin, TwitterFacebook or Instagram.

  1. Personal data we process

The data we process is divided into categories: technical information and data that is provided to us by visitors and Users.

Technical data. When you visit our website, some data is collected automatically. We need technical data to operate, maintain, and improve our website. This includes data such as IP address, UTM parameters, geolocation, device type, browser type and data about your interaction with the website - session ID.

Session ID IS your interaction with the site, the name of the website from which you came to our website, the features you use, the pages used on our website, how you use our website and the actions you take, if any.

Data provided to us by:

Data provided by third parties:

Once again, detailed about what personal data we collect:

Type of data

Description of data

Legal basis

Reasons for processing

All data subjects (Users + Visitors)

Automatically collected data

  • Technical information;
  • Session ID.

Legitimate interest

Website operation;



Automatically collected data

  • Cookies


Website operation;




You fill out the ‘Keep in touch’ form

  • Name.
  • Email.
  • any other information.

Legitimate interest.

Support, Marketing

Data provided by third parties

Data collected from ‘Linkedin’

  • Name.
  • Surname
  • Photo.
  • Other information that can be obtained via Linkedin.

Legitimate interest.


Data collected from ‘Twitter’

  • Nickname.
  • Photo.
  • Other information that can be obtained via Twitter.

Legitimate interest.


Data collected from ‘Facebook’

  • Name.
  • Surname.
  • Photo.
  • Other information that can be obtained via Facebook.

Legitimate interest.


Data collected from ‘Instagram’

  • Name.
  • Surname.
  • Photo.
  • Other information that can be obtained via Instagram.

Legitimate interest.


Pay your attention. We knowingly do not process the personal data of users under the age of 16 without consent from legal representative(s). If you are such a user, or you are the legal representative of the user, please let us know by email: 

  1. Period of data storage

We store user data during the use of our services and for 3 years afterwards.

We store technical data (and visitor data) for up to 1 year.

Please note: some data contained in documents that are required by law to be stored for a longer period of time (for example, accounting documents).

The duration of data storage  received from 3 parties is determined by the relevant Messages for data processing services: Facebook, Instagram, Linkedin, Twitter.

You can exercise your right to delete your data. In this case, your data will be deleted from our servers within 30 days of your request.

  1. Sharing data with third parties

We use your personal data to perform a contract and for communication between us and the user. We use and transfer your personal data in measures which are needed to perform a contract. Also, we transfer your data on the following grounds:

Consent. We transfer your personal data based on your explicit consent.

Compliance with the law. We will disclose your personal data to third parties to the extent that it is necessary:

Transfer to third parties: We transfer your personal data to third parties on the basis of a public offer for processing on our behalf, subject to technical and organizational measures to protect your personal data.

  1. Your privacy rights

You, as subjects of personal data, have the following rights:

The right to access information.

You can request an explanation of the processing of your personal data.

The right to portability.

You can request all the data that you provided to us, as well as request to transfer data to another controller.

The right to restrict processing.

You may partially or completely prohibit us from processing your personal data.

The right to file complaints.

If your request was not satisfied, you can file a complaint to the regulatory body.

The right to be forgotten.

You can send us a request to delete your personal data from our systems, unless there is a legal requirement to keep it.

The right to withdraw consent.

For data that you have previously consented to, you can always withdraw your consent and we will stop processing it.

To exercise your rights, write us an email at We will answer you as soon as possible.

If your request was not satisfied, you can file a complaint to the regulatory body — the Data Protection Inspectorate, at or write a letter to 39 Tatari St., 10134 Tallinn.

  1. Transfer of data outside the European Economic Area

The personal data we collect is stored on our servers in France. By default, the data is processed in France, but we may need to process your personal data in another country.

  1. The use of cookies

We process technical data and use cookies. You may find our Cookie Policy here. If you want to disable cookies, then you can find instructions for managing your browser settings at these links:

Internet Explorer



Microsoft Edge 




  1. Update

This Privacy Notice and the relationships falling under its effect are regulated by the GDPR. Existing laws and requirements for the processing of personal data are subject to change. In this case, we will publish a new version of the Privacy Notice on our website. If significant material changes are made that affect your privacy and confidentiality, we will notify you by email or display information on the website and ask for your consent.