Eduard Langebraun

Data and privacy

Privacy
policy

Who is responsible for your data, why it is needed and how you can exercise your rights.

Updated

Who is responsible for your data

I, Eduard Langebraun, work with clients through Westhill Property OÜ. The legal entity responsible for processing personal data is:

Company
Westhill Property OÜ
Registry code
11529910
Registered address
Õismäe tee 173-14,
13517 Tallinn, Estonia
Contact person
Eduard Langebraun
Email
eduard@langebraun.com

Enquiries and correspondence

When you submit the form, I receive your name, email address, message and, if you provide them, your company or website. Enquiries go only to eduard@langebraun.com and are not transferred to a CRM.

I need this information to respond, understand your task and discuss possible cooperation. Your name, email address and a description of the task are required to submit the form; company and website details are optional. You choose whether to provide information. Without a reply address, I cannot contact you.

If you enquire about entering into a contract in your own name, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For enquiries from company representatives and general business questions, the basis is Westhill Property OÜ’s legitimate interest in responding to requests and conducting business correspondence (Article 6(1)(f) GDPR).

Making an enquiry does not subscribe you to a mailing list. Please do not include passwords, payment details or sensitive personal information in your first message.

Retention periods

If an enquiry does not lead to cooperation, correspondence will be deleted 6 months after the last communication.

If we work together, retention periods for contractual and accounting documents will be determined separately, taking applicable legal requirements into account. Correspondence needed for a specific dispute or legal claim may be retained for as long as necessary to resolve it.

Hosting and recipients

I read and handle enquiries personally. The website and email use OVHcloud; the provider named in the accepted agreement is OVH Hosting Ltd., Ireland. The website is hosted in Gravelines, France. OVHcloud processes data to provide hosting and email services.

Processing is governed by the OVHcloud Data Processing Agreement. The list of authorised sub-processors includes group companies in the EU, the United Kingdom and Canada. The website’s hosting location does not by itself exclude remote processing in another country; the applicable terms and transfer safeguards depend on the contract and service.

I have requested confirmation from OVHcloud of retention periods for raw technical logs and email backups, remote processing locations and the international transfer safeguards applicable to these services. These details remain under clarification; I will update this section when OVHcloud responds.

Cookies and analytics

This version of the website has no Google Analytics, advertising pixels or external fonts. The website’s own code does not set cookies or store form entries in the browser’s local storage. No third-party CAPTCHA service is used.

OVHcloud’s infrastructure may set a technical SERVER ID cookie to keep the hosting service working correctly. The provider’s documentation specifies a lifetime of less than 24 hours. It is not intended for advertising tracking.

The hosting service also includes OVHcloud Web Statistics, enabled by default. The provider processes request data, including the IP address, requested URL and request duration, then anonymises and aggregates it. Under the service terms, anonymised reports remain available for up to 40 months. This is not the retention period for raw server logs.

Technical processing supports the operation and security of the website; statistics help me understand its use. The basis is Westhill Property OÜ’s legitimate interests in operating a secure website and improving it (Article 6(1)(f) GDPR). If I add new tools, I will update this policy and request consent where required.

The website does not use profiling or make automated decisions about visitors with legal or similarly significant effects.

Form data is sent over HTTPS to the hosting service for delivery to eduard@langebraun.com. The application does not save copies of enquiry text in files. Spam protection stores request counters, timestamps, used verification tokens and an HMAC hash of the IP address. The checks use windows of 5 minutes to 1 hour; expired entries are removed on the next eligible request. If there are no further requests, entries may remain longer.

Your rights

Within the scope of the GDPR, you can request access to your data, rectification or erasure, restriction of processing and data portability. You can also object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing.

You can contact me at the registered address above or at eduard@langebraun.com. I normally respond within one month; if the law permits an extension, you will be notified within that period.

You may lodge a complaint with a supervisory authority, including Estonia’s Andmekaitse Inspektsioon, or the authority in the place of your habitual residence, work or the alleged infringement.

Back to contact