Privacy Policy & Cookies

Controller: Delta Invest Group OÜ; supervisory authority AKI — Tatari 39, 10134 Tallinn.

Categories: account; health data (explicit consent); logs; payments; cookies.

Legal bases (GDPR Arts 6,9): contract, legitimate interests, legal obligation (bookkeeping — 7 years), consent (marketing, cookies, health — explicit).

Cookies/CMP: no non-essential cookies before consent.

Recipients: hosting, email/analytics/payment providers, AI providers (minimum; DPAs in place). Outside EEA — SCC 2021/914 + TIA.

Retention: account/protocols — lifetime + up to 24 months; logs — 12–24 months; payment documents — 7 years.

Rights: access, rectification, erasure, portability, restriction, objection, withdraw consent; complaint — AKI.

AI assistant: informational replies; short chat logs to admin email only with separate consent.