Privacy Policy

Who we are

The operator and controller of this website is TorosRicos OÜ, registered in Estonia. Toros Ricos is the public brand under which TorosRicos OÜ operates.

You can reach us through the contact details and contact form published on this website.

Contact form submissions

This website provides a contact form. When you choose to send us a message through it, we process the information you enter voluntarily: your name, your email address, your message, and optionally your company name and phone number.

Submitting the form is always voluntary. Before sending, you acknowledge that the information you provide will be used to handle your inquiry; that acknowledgement is recorded together with your submission so we can demonstrate the basis on which we contacted you.

We use this information solely to read, assess and respond to your inquiry and to keep an internal record of the correspondence. We do not sell it and do not share it with third parties unless we are legally required to do so.

Email correspondence

If you contact us directly by email instead of using the form, we process the information contained in your message, including your name, email address and any details you choose to include, for the same purpose: responding to your inquiry.

Technical and security metadata

To keep the contact form usable and to protect it against automated abuse, our systems also record a limited amount of technical metadata alongside a submission:

We do not store your IP address. Rate limiting works on a one-way hashed value from which the original address cannot be recovered.

• A one-way hashed, non-reversible identifier derived from the network address used to submit the form, used only to limit how many messages can be sent from the same connection within a period of time.
• The browser user-agent string reported by your device, and the referring page address when your browser supplies one.
• The page path on our website from which the message was sent, and the time of submission.
• A technical de-duplication key that lets us recognise an accidental repeat submission of the same message instead of creating a duplicate record.

Purposes and legal bases

We process the data described above in order to respond to and handle your inquiry, to operate and secure the website and prevent abuse of the contact form, and to keep the internal records we need for accountability and to demonstrate how an inquiry was handled.

Depending on the situation, the legal basis is your own initiative and acknowledgement when you submit the form, our legitimate interest in operating and protecting the website and in following up on business inquiries, and, where applicable, compliance with our legal obligations.

Internal notification and handling

When a message is received, an internal notification record is created so that the responsible people are aware of it. At present no external email or messaging provider is configured for this website, so these notification records remain internal and deferred, and no submission content is transmitted to an external delivery service.

Internal handling notes that our team may add while working on an inquiry are strictly internal and are never published or shared back to the sender.

Analytics

This website loads Google Analytics (Google Tag, measurement configuration G-0YKLXWG1FB) to measure aggregate website usage such as page views. Google acts as our analytics provider for this purpose.

Beyond the analytics described here, we do not operate advertising trackers or profiling technologies on this website. If we introduce further tracking or cookie-based technologies in future, this policy will be updated before or when they become active.

Retention

We keep inquiry records only for as long as they are needed: to handle and follow up on the inquiry itself, to protect the website against abuse, and to satisfy legal, accounting and accountability obligations that apply to us.

Handled inquiries are moved to an internal archive state rather than being kept in active working queues. We have not fixed a single universal deletion period in this policy; a governed retention schedule will be published here once it has been formally approved. You may in the meantime ask us to erase your inquiry data, and we will do so where no legal obligation requires us to keep it.

Your GDPR rights

As a company established in Estonia, TorosRicos OÜ processes personal data in accordance with the GDPR. You have the following rights in relation to your personal data:

• Right to Access: request access to the information we hold about you.
• Right to Rectification: request corrections to any inaccurate or incomplete information.
• Right to Erasure: request deletion of your information, where applicable.
• Right to Restrict Processing: limit the processing of your data, where applicable.
• Right to Data Portability: request a copy of your data in a structured, commonly used and machine-readable format.
• Right to Object: object to certain uses of your data, where applicable.
• Right to Withdraw: ask us to stop processing an inquiry you submitted voluntarily.
• Right to Complain: lodge a complaint with your national data protection authority, in Estonia the Andmekaitse Inspektsioon.

How to exercise your rights

To exercise any of these rights, contact TorosRicos OÜ using the contact details published on this website. We will respond within the period required by applicable law. We may ask for information reasonably necessary to confirm that a request genuinely relates to your own data.

Data security

We take reasonable technical and organisational precautions to protect the information you share with us, including restricted role-based access to inquiry records and internal audit logging of administrative actions. However, no method of data transmission or storage is completely secure and we cannot guarantee absolute security.

Third-party links

Our website may contain links to third-party websites. TorosRicos OÜ does not control, endorse or assume responsibility for the content, privacy policies or practices of these third-party sites. We recommend reviewing their privacy policies before using them.

Changes to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page and the effective date will be updated accordingly. By continuing to use our website after any changes, you accept the updated Privacy Policy.