This Privacy Policy explains how Seedium OÜ processes personal data when you visit sustainability.seedium.io (the "Site"), the website of Seedium Sustainable Health, a practice of Seedium OÜ, or when you contact us through the Site.
The main Seedium website, seedium.io, has its own privacy policy. This policy covers the Site only.
1. Who we are
The controller of your personal data is:
Seedium OÜRegistry code: 16968360
Kaupmehe tn 7-120, Tallinn 10114, Estonia
Privacy requests: privacy@seedium.io
General enquiries: info@seedium.io
2. What data we collect and why
2.1 When you contact us through the form or by email
- Data: your name, organisation, work email, role (optional), the content of your message, and confirmation that you have read this policy.
- Purpose: to answer your enquiry and, if you wish, to discuss a possible cooperation.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).
- Retention: 24 months after our last communication. If the enquiry leads to a contract, the data is kept for as long as the contract and our legal accounting obligations require.
2.2 When you book a call
If you use the "Book a 30 minute call" link, you are taken to HubSpot Meetings, a scheduling page hosted in HubSpot's EU data centre, which collects your name, email address and chosen time on our behalf. The purpose, legal basis and retention are the same as in section 2.1.
2.3 When you browse the Site
- Technical data: IP address, browser and device type, pages requested, date and time of the request. Our hosting provider processes this data to deliver the Site and protect it against attacks.
- Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
- Retention: 30 days in server logs.
- Analytics: only if you accept analytics cookies, we collect usage statistics such as pages visited, referring website, approximate country and device type, to understand how the Site is used and improve it.
- Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time through "" in the footer.
- Retention: up to 14 months, in line with the data retention setting in Google Analytics.
2.4 What we do not do
- We do not use the Site to collect special categories of personal data, such as health data. Please do not include such data in your message.
- We do not use your data for automated decision-making or profiling.
- We do not sell personal data or share it with third parties for their own marketing.
3. Who receives your data
We share personal data only where necessary and only with:
- Service providers that process data on our behalf under a data processing agreement: hosting (Netlify, Inc., United States, delivered through Netlify's global network), form handling (HubSpot, EU data centre), email (Google Workspace), call scheduling (HubSpot Meetings, EU data centre) and, only with your consent, analytics (Google Analytics, provided by Google Ireland Limited).
- Members of the Seedium team who need the data to answer your enquiry.
- Professional advisers, such as lawyers and accountants, who are bound by confidentiality.
- Public authorities or courts, where we are required to do so by law.
- A successor company, in the event of a merger or acquisition, subject to this policy.
4. Where your data is processed
We aim to store and process personal data within the European Union and the European Economic Area. Where a service provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on the Standard Contractual Clauses adopted by Commission Implementing Decision (EU) 2021/914, with additional safeguards where needed. You can request information about these safeguards at privacy@seedium.io.
5. How we protect your data
We use encrypted connections (HTTPS and TLS), limit access to personal data to the people who need it, use multi-factor authentication for our systems, sign data processing agreements with our service providers and review these measures regularly.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate or incomplete data;
- erasure of your data, where there is no longer a legal reason to keep it;
- restriction of processing, for example while we check the accuracy of your data;
- data portability, for data you provided to us that we process on the basis of consent or a contract;
- object to processing based on our legitimate interests, and to object at any time to direct marketing;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to privacy@seedium.io with the subject line "Privacy request". We reply within one month. For complex requests this period can be extended by up to two further months, and we will tell you if that happens. Exercising your rights is free of charge. We may refuse or charge a reasonable fee only for requests that are manifestly unfounded or excessive. We may ask you to confirm your identity before we act on a request.
You also have the right to lodge a complaint with a supervisory authority. In Estonia this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee. You may also contact the supervisory authority in the EU country where you live, work or where you believe an infringement took place.
7. Children
The Site is intended for professionals and is not directed at children under 16. We do not knowingly collect personal data from children.
8. Links to other websites
The Site contains links to other websites, such as seedium.io, LinkedIn and the websites of organisations that have recognised our work. Their privacy practices are governed by their own policies.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. We will highlight significant changes on the Site.
10. Contact
For any question about this policy or your personal data, write to privacy@seedium.io or to Seedium OÜ, Kaupmehe tn 7-120, Tallinn 10114, Estonia.