Effective from: July 1, 2026
1. Data Controller
1.1. The controller of personal data is Inception OÜ, registry code 12484581, address Paekalda 16, 13628, Tallinn, Estonia, e-mail info@numismaatika.com (we, us).
1.2. This Privacy Policy describes how we process the personal data of visitors to the website numismaatika.com and other domains operated by Inception OÜ publishing the same content (together, the Website) and of persons who contact us.
2. What Data We Collect
2.1. Data submitted through the contact form: name, e-mail address, selected topic, content of the message and up to five photographs that the user may attach.
2.2. Technical data when visiting the Website: IP address, browser and device information, time of visit and server logs collected by the hosting provider to ensure the operation and security of the Website.
2.3. Communication via social media: if you contact us via Facebook, Instagram, or YouTube, we process your public profile name and the content of your message in accordance with the settings of the platform.
2.4. Transaction data: if an inquiry leads to a purchase or sale transaction, we process the data necessary for concluding the transaction and for accounting, such as name, contact details and payment details.
3. Purposes and Legal Bases of Processing
3.1. Responding to inquiries and providing a free preliminary opinion: taking steps prior to entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation) and our legitimate interest in responding to communications (Article 6(1)(f)).
3.2. Processing purchase offers and preparing transactions: steps prior to entering into a contract (Article 6(1)(b)).
3.3. Operation and security of the Website and prevention of misuse: our legitimate interest (Article 6(1)(f)).
3.4. Accounting and compliance with tax obligations: legal obligation (Article 6(1)(c)) arising from the Estonian Accounting Act and tax legislation.
3.5. We do not use personal data for automated decision-making or profiling and we do not sell personal data to third parties.
4. Processing of Photographs
4.1. Photographs sent through the contact form should depict only the item to be evaluated. Please do not send photographs showing other persons, documents or other sensitive information.
4.2. We use photographs solely for processing the inquiry and for record-keeping. We do not publish submitted photographs on the Website or elsewhere without the sender's separate consent.
4.3. Image files may contain metadata, such as the time or location of the photograph. You may remove metadata yourself before sending, if you wish.
5. Retention Periods
5.1. We generally retain inquiries and related correspondence for up to three years from the last communication, in order to respond to possible follow-up questions and to protect legal interests.
5.2. We retain accounting documents related to transactions for seven years in accordance with the Estonian Accounting Act.
5.3. Server logs are retained for a short period for security purposes in accordance with the standard practice of the hosting provider.
5.4. Upon expiry of the retention period, the data are deleted or anonymized.
6. Disclosure of Data
6.1. We use service providers who process data on our behalf and under our instructions: the web hosting provider, the e-mail service provider and, where necessary, IT and accounting service providers. Appropriate agreements have been concluded with the service providers.
6.2. We may disclose data to public authorities where required by law.
6.3. In other cases, we do not transfer personal data to third parties.
7. Transfers Outside the European Economic Area
7.1. As a rule, we process data within the European Economic Area. If a service provider, such as an e-mail or social media platform, is located outside the European Economic Area, we ensure appropriate safeguards for the transfer, for example on the basis of an adequacy decision of the European Commission or standard contractual clauses.
8. Cookies
8.1. The Website uses necessary cookies that are essential for the operation of the site, for example for remembering the language selection and display preferences (dark or light mode).
8.2. We use statistics or marketing cookies only with your consent, which you may withdraw at any time.
8.3. You can manage and delete cookies through your browser settings. Disabling necessary cookies may affect the operation of the Website.
9. Your Rights
9.1. You have the right to: (a) access the data processed about you; (b) request the rectification of inaccurate data; (c) request the erasure of data; (d) request the restriction of processing; (e) receive the data in a machine-readable format and transfer them; (f) object to processing based on legitimate interest; (g) withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
9.2. To exercise your rights, please send a request to info@numismaatika.com. We will respond within one month at the latest. Where necessary, we may ask you to verify your identity.
10. Right to Lodge a Complaint
10.1. If you believe that your rights have been violated in the processing of your data, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or to bring the matter before a court.
11. Security
11.1. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure and destruction, including encrypted data transmission (HTTPS) and access restrictions.
12. Children's Data
12.1. The Website is directed at the general public and is not intended for collecting children's data. We do not knowingly collect personal data of children under 13 years of age. We conclude purchase and sale transactions only with adults.
13. Changes
13.1. We may update this Privacy Policy from time to time by publishing a new version on the Website together with its effective date.
14. Contact
14.1. For all questions concerning the processing of personal data, please write to info@numismaatika.com.