Privacy Policy
We don't collect what we don't need. What we do collect, we protect. This policy explains exactly how we handle your data — no buried clauses, no clever workarounds. GDPR-compliant by design, not by obligation.
Data Controller
The data controller responsible for your personal data is:
What Data We Collect
We collect only the minimum personal data necessary to operate this website and communicate with you. Depending on how you interact with us, we may collect the following:
- Contact data — name and email address when you contact us directly via email.
- Usage data — pages visited, time spent, browser type, device type, and approximate location via IP address, collected through analytics tools.
- Cookie data — small files stored in your browser to remember preferences and measure traffic. See Section 04 for details.
- Communication data — any information you voluntarily include in messages sent to team@gammtribe.com.
We do not collect sensitive personal data (health, financial, biometric, or similar categories) and we do not sell personal data to third parties under any circumstances.
Legal Basis and Purpose of Processing
Under the GDPR, we process personal data only when there is a valid legal basis. The purposes and corresponding bases are:
Cookies
This website uses cookies to ensure basic functionality and to collect anonymous analytics data. We use only the following categories:
We do not use advertising cookies, tracking pixels, or third-party profiling technologies. You may withdraw cookie consent at any time by clearing your browser cookies or adjusting your browser settings.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:
- Email correspondence is retained for up to 3 years from the date of last contact.
- Analytics data is retained in aggregated, anonymised form and is not subject to deletion requests.
- Data processed for legal compliance may be retained for the period required by Estonian or EU law.
Your Rights Under GDPR
As a data subject under the General Data Protection Regulation, you have the following rights with respect to your personal data:
To exercise any of the above rights, contact us at team@gammtribe.com. We will respond within 30 days as required by GDPR.
Third-Party Services and Data Transfers
We may use third-party services to operate this website (such as hosting providers and analytics tools). These service providers act as data processors on our behalf and are contractually bound to process data only according to our instructions and in compliance with GDPR.
All personal data is processed within the European Economic Area (EEA). If a transfer outside the EEA is ever required, it will be carried out only with appropriate safeguards in place, such as Standard Contractual Clauses approved by the European Commission.
Governing Law and Supervisory Authority
This Privacy Policy is governed by the laws of the Republic of Estonia and the EU General Data Protection Regulation (GDPR — Regulation 2016/679). The competent supervisory authority for data protection matters is:
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be noted by updating the "Last updated" date at the top of this page. Continued use of this website after an update constitutes acceptance of the revised policy.
Contact for Data Requests
For any privacy-related questions, data access requests, or concerns, please contact us directly: