What we know about you, and what we do with it.

The controller of the personal data described in this notice is Lävi Clinical Suite OÜ, registry code 17396580, Aardla tn 62, 50413 Tartu, Estonia. Contact: andreas@lavi-clinical.com.

If you email or call us. We process your email address or phone number, your name if you give it, and what you write or say. Mail to our address lands in the founder's mailbox and is read by him; it is processed on our behalf by Microsoft (Exchange Online / Outlook), provided through GoDaddy. Purpose: answering you and conducting the conversation you started. Legal basis: our legitimate interest in responding to people who contact us (GDPR Art. 6(1)(f)), or steps taken at your request before entering a contract (Art. 6(1)(b)). Retention: contact correspondence is kept for up to 24 months after the last substantive exchange, unless the enquiry develops into a contractual, research, regulatory or other ongoing relationship that requires longer retention.

When the site is served to you. This is a static website hosted on GitHub Pages (GitHub, Inc., USA) and delivered through its content delivery network. Like any web host, the provider processes your IP address and request metadata to deliver the pages; GitHub's own privacy documentation applies to that processing. We do not receive or store server logs ourselves.

That is all. The site sets no cookies, runs no analytics or tracking, hosts its fonts itself, loads no third-party scripts, and contains no forms.

You may ask for access to the personal data we hold about you, for correction or erasure of it, or for restriction of its processing, and you may object to processing based on our legitimate interest. Write to andreas@lavi-clinical.com — the same person who read your original email will handle the request.

If you believe we have handled your data unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or with the supervisory authority of your own member state.