Privacy Policy

1. Controller

The data controller for this website is:

27 Invest OÜ
15 Avenue du général de Gaulle, 94500 Champigny-sur-Marne, France
Estonian Registry Code: 16829373
VAT: EE102661677
Email: info@27invest-ou.com
Phone: +358 2 559 370

2. Data We Collect and Why

We collect personal data only in the following circumstances:

Contact form enquiries

When you submit the contact form on this website, we collect your name, email address, optional phone number, and the content of your message. We use this data to respond to your enquiry and, where relevant, to prepare an engagement. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR).

Strictly necessary cookies

We store your cookie consent choice in localStorage for up to 12 months. No personal data other than your preference is stored in this way. The legal basis is our legitimate interest in respecting and recording your privacy choices (Article 6(1)(f) GDPR).

3. How Long We Keep Your Data

Enquiries that do not lead to an engagement are deleted six months after our last reply to you. Enquiries that lead to an engagement are kept for the duration of the engagement and for any applicable statutory retention period thereafter. You may ask us to delete your data sooner by contacting us at the address in §1. Cookie consent preferences are stored for 12 months.

4. Data Processors

We use the following processors:

• Vercel Inc. (340 Pine Street, Suite 701, San Francisco, CA 94104, USA) — provides the infrastructure on which this website is hosted and served, and processes server logs including IP addresses in the course of doing so.
• Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) — this website loads the Archivo and Archivo Black typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Each page load sends your IP address and browser information to Google's servers as part of delivering those font files. Google Fonts does not set cookies and is not used for advertising or analytics purposes.
• Email service provider — used to receive and respond to contact form submissions. Provider details available on request.

We do not sell personal data to any third party.

4a. International Transfers

Vercel Inc. and Google LLC are based in the United States. Personal data transferred to them is protected by their respective participation in the EU–US Data Privacy Framework (DPF), which the European Commission has recognised as providing an adequate level of protection. You can verify Vercel's and Google's DPF certification at dataprivacyframework.gov. Where DPF certification is not maintained, transfers rely on the European Commission's Standard Contractual Clauses as incorporated in each provider's data processing terms.

5. Your Rights

Under the GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate data corrected.
• Right to erasure — to request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to restriction — to request that we restrict processing of your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@27invest-ou.com.

6. Right to Complain

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In France this is the CNIL (www.cnil.fr); in Estonia, the Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn (www.aki.ee).

7. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available at this URL. We will note the date of the most recent update at the top of this page.