Effective from: July 1, 2026
1. Data Controller
1.1. The controller of personal data is Inception OÜ, registry code 12484581, address Paekalda 16, 13628, Tallinn, Estonia, e-mail info@numismaatika.com (we, us).
1.2. This Privacy Policy describes how we process the personal data of visitors to the website numismaatika.com and other domains operated by Inception OÜ publishing the same content (together, the Website) and of persons who contact us.
2. What Data We Collect
2.1. Data submitted through the contact form: name, e-mail address, selected topic, content of the message and up to five photographs that the user may attach.
2.2. Technical data when visiting the Website: IP address, browser and device information, time of visit and server logs collected by the hosting provider to ensure the operation and security of the Website.
2.3. Communication via social media: if you contact us via Facebook, Instagram, or YouTube, we process your public profile name and the content of your message in accordance with the settings of the platform.
2.4. Transaction data: if an inquiry leads to a purchase or sale transaction, we process the data necessary for concluding the transaction and for accounting, such as name, contact details and payment details.
3. Purposes and Legal Bases of Processing
3.1. Responding to inquiries and providing a free preliminary opinion: taking steps prior to entering into a contract at your request (Article 6(1)(b) of the General Data Protection Regulation) and our legitimate interest in responding to communications (Article 6(1)(f)).
3.2. Processing purchase offers and preparing transactions: steps prior to entering into a contract (Article 6(1)(b)).
3.3. Operation and security of the Website and prevention of misuse: our legitimate interest (Article 6(1)(f)).
3.4. Accounting and compliance with tax obligations: legal obligation (Article 6(1)(c)) arising from the Estonian Accounting Act and tax legislation.
3.5. We do not use personal data for automated decision-making or profiling and we do not sell personal data to third parties.
4. Processing of Photographs
4.1. Photographs sent through the contact form should depict only the item to be evaluated. Please do not send photographs showing other persons, documents or other sensitive information.
4.2. We use photographs solely for processing the inquiry and for record-keeping. We do not publish submitted photographs on the Website or elsewhere without the sender's separate consent.
4.3. Image files may contain metadata, such as the time or location of the photograph. You may remove metadata yourself before sending, if you wish.
5. Retention Periods
5.1. We generally retain inquiries and related correspondence for up to three years from the last communication, in order to respond to possible follow-up questions and to protect legal interests.
5.2. We retain accounting documents related to transactions for seven years in accordance with the Estonian Accounting Act.
5.3. Server logs are retained for a short period for security purposes in accordance with the standard practice of the hosting provider.
5.4. Upon expiry of the retention period, the data are deleted or anonymized.
6. Disclosure of Data
6.1. We use service providers who process data on our behalf and under our instructions: the web hosting provider, the e-mail service provider, web analytics service providers (see section 8) and, where necessary, IT and accounting service providers. Appropriate agreements have been concluded with the service providers.
6.2. We may disclose data to public authorities where required by law.
6.3. In other cases, we do not transfer personal data to third parties.
7. Transfers Outside the European Economic Area
7.1. As a rule, we process data within the European Economic Area. If a service provider, such as an e-mail or social media platform, is located outside the European Economic Area, we ensure appropriate safeguards for the transfer, for example on the basis of an adequacy decision of the European Commission or standard contractual clauses.
8. Cookies
8.1. Necessary cookies are essential for the operation of the Website and cannot be turned off. These include the cookie numis_consent, which remembers your cookie choice (retention period 6 months). In addition, we store your display preference, i.e. the dark or light mode selection, and the language you last viewed in your browser’s local storage (localStorage). This data is not transferred to third parties and is not used to identify you.
8.2. We use analytics and performance cookies only with your prior consent. Until consent has been given, they are not stored. You can give or withdraw your consent at any time via the “Cookie settings” link in the footer of the Website. When consent is withdrawn, the cookies belonging to that category are deleted.
8.3. Analytics cookies. We use Google Analytics 4, whose provider for users in the European Economic Area is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The service helps us understand how many people visit the Website and which pages are popular. The cookies _ga and the _ga_ prefixed cookie store a random identifier that does not contain your name or e-mail address; their retention period is up to two years in Google’s default configuration. Data may also be processed outside the European Economic Area, in which case section 7 applies. Data collected in Google Analytics is retained for the period configured in the Google service, after which it is deleted automatically.
8.4. Performance cookies. These help us see how visitors move around the Website and where they encounter difficulties, so that we can improve usability. For this we use the usability analytics tool Hotjar, which is part of the Contentsquare group. The data collected is pseudonymised and does not contain your name or e-mail address.
8.5. You can also manage and delete cookies through your browser settings. Disabling necessary cookies may affect the operation of the Website.
9. Your Rights
9.1. You have the right to: (a) access the data processed about you; (b) request the rectification of inaccurate data; (c) request the erasure of data; (d) request the restriction of processing; (e) receive the data in a machine-readable format and transfer them; (f) object to processing based on legitimate interest; (g) withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
9.2. To exercise your rights, please send a request to info@numismaatika.com. We will respond within one month at the latest. Where necessary, we may ask you to verify your identity.
10. Right to Lodge a Complaint
10.1. If you believe that your rights have been violated in the processing of your data, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or to bring the matter before a court.
11. Security
11.1. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure and destruction, including encrypted data transmission (HTTPS) and access restrictions.
12. Children's Data
12.1. The Website is directed at the general public and is not intended for collecting children's data. We do not knowingly collect personal data of children under 13 years of age. We conclude purchase and sale transactions only with adults.
13. Changes
13.1. We may update this Privacy Policy from time to time by publishing a new version on the Website together with its effective date.
14. Contact
14.1. For all questions concerning the processing of personal data, please write to info@numismaatika.com.