Privacy policy

Who we are

BT4 INVEST OÜ (operating as "OVAAL"), Estonian e-Business Register number 12443056. Corporate details publicly verifiable at ariregister.rik.ee (BT4 Invest OÜ).

What we process

This marketing site (ovaal.io) processes personal data when you submit a form (integration brief, book-a-call, contact), or when analytics consent is granted. Categories: name, work email, company name, role, company size, region, free-text notes. Automatically: IP address, browser type, referring URL (analytics, consent-gated).

Legal basis (GDPR Art. 6)

• Art. 6(1)(b) Contract: processing to respond to your inquiry.
• Art. 6(1)(f) Legitimate interest: site security, fraud prevention, visitor-pattern understanding.
• Art. 6(1)(a) Consent: marketing communications, non-essential cookies.

Sub-processors

AWS (EU regions), Cloudflare (CDN and WAF), EU-based managed hosting, analytics providers (consent-gated). Full list and partner-specific sub-processors at /compliance/.

Retention

Marketing-form submissions: 36 months from last contact. Partner-relationship data: per MSA term plus 7 years. Analytics: GA4 default 14 months.

Your rights

GDPR Art. 15 to 22: access, rectification, erasure, restriction, objection, portability, consent withdrawal. Email privacy@ovaal.io. We respond within 30 days.

Data Protection Officer

Reach the DPO at dpo@ovaal.io. Formal appointment letter and credentials available to partners under NDA.

Supervisory authority

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia. aki.ee. BT4 INVEST OÜ's main establishment is Estonia under GDPR Art. 56 (one-stop-shop).

Contact

privacy@ovaal.io · dpo@ovaal.io

Last updated: 2026-04-24.