What principles govern the protection of your privacy?

These principles explain the processing of personal data associated with the use of the website https://ridotest.win (ALTOSTRATUS d.o.o.): which data the controller uses, for what purposes and on which legal bases, the retention periods and recipients of the data, and the rights you have. Processing is based on the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the isikuandmete kaitse seadus (Personal Data Protection Act).

1. Who is responsible for processing your data?

• Name of the controller: ALTOSTRATUS d.o.o. za usluge
• Controller's address: Zagreb (Grad Zagreb) Ulica Cvijete Zuzorić 27
• Controller's registry code: 030204298
• Controller's VAT registration number: 88142615396
• Contact email: info@altostratus.win
• Website address: https://ridotest.win

You may submit data protection questions and related requests to the email address given above.

2. Which of your personal data are used?

• Communications and enquiries: your name, email address, telephone number if you provide it, and the content of the message submitted through the form are processed.
• Technical information on website use: to ensure the operation and security of the website, the web hosting provider records technical data about visits in logs, namely the IP address, browser type and time of the visit.
• Use of cookies: your cookie choice is remembered. Further information is provided on the Cookie Policy page.

3. For what purposes and on which legal bases are your data processed?

Purpose of processing	Data used	Legal basis for processing
Responding to enquiries and preparing offers	name, email address, telephone number and message content	pre-contractual steps and the legitimate interest in responding to an enquiry (GDPR Article 6(1)(b) and (f))
Ensuring the secure operation of the website	technical data on website use	reliance on a legitimate interest (GDPR Article 6(1)(f))

4. How long are your data retained?

• Enquiry data are kept until a response has been provided; if the enquiry leads to the conclusion of a contract, they are retained until the retention period applicable to that contract has expired.
• The retention period for technical data is determined by the web hosting provider's logging rules.
• The retention periods for cookies correspond to the periods set out in the table on the Cookie Policy page.

5. To whom are data disclosed, and who processes them on behalf of the controller?

Data are neither sold nor disclosed to third parties for their own purposes. The following service providers may process data on behalf of the controller to the extent necessary:

• Web hosting provider — for storing the website and messages received, and for sending emails.

6. Are your data transferred outside the European Economic Area?

Data are processed within the European Economic Area. If a processor also processes data outside that area, this is permitted only where appropriate safeguards are applied, namely an adequacy decision of the Euroopa Komisjon (European Commission) or standard contractual clauses.

7. Which rights can you exercise in relation to your data?

• You have the right to access your data and request a copy of them (GDPR Article 15);
• you have the right to request the rectification (Article 16) and erasure (Article 17) of your data;
• you have the right to request restriction of processing (Article 18);
• you have the right to data portability (Article 20);
• you have the right to challenge processing based on a legitimate interest by lodging an objection (Article 21);
• you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3)).

You may submit a request to exercise your rights by email to info@altostratus.win. The controller will respond without undue delay and no later than within 1 month; where justified, this period may be extended by a further 2 months in accordance with GDPR Article 12(3), and you will be informed of any such extension.

8. How can you lodge a complaint with the supervisory authority?

You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your data does not comply with the law; the authority's contact details are as follows:

• Andmekaitse Inspektsioon
• Authority's address: Tatari 39, 10134 Tallinn
• Contact email: info@aki.ee
• Authority's website: https://www.aki.ee/

You also have the right to bring proceedings before a court.

9. Where can you find the terms governing the use of cookies, and how can you change your choice?

Cookies are used on this website, and their types, purposes and duration are explained on the Cookie Policy page. You may change your cookie choice at any time by using the cookie settings button at the bottom of the page.

10. When is the privacy policy updated?

The controller updates this privacy policy whenever the manner in which data are processed changes. Last updated: 30 October 2026.