Privacy policy
Privacy policy
This notice explains what personal data Trinidad Wiseman (hereinafter „Trinidad Wiseman“ or „we“) collects, how we use it, to which third parties we disclose data, how we protect data, and what rights you have as a data subject. We also provide an overview of the use of cookies and other similar technologies on our websites.
Last updated: 29.12.2025
Data Controller and contact details
- Company: Trinidad Wiseman OÜ
- Registry code: 11244225
- Address: Meistri 14, 13517 Tallinn, Estonia
- Email: privacy@twn.ee
- Phone: +372 63 11 111
- Data Protection Officer (DPO) contact: lauri.esko@twn.ee
Our activities comply with all applicable European Union legal acts and the laws of the Republic of Estonia. When processing personal data, we primarily follow Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) and the Estonian Personal Data Protection Act, as well as other applicable data protection legislation.
Data protection principles
Protecting personal data is important to Trinidad Wiseman’s clients and other persons whose personal data Trinidad Wiseman processes. We therefore protect the privacy of all data subjects responsibly and with due care. Our key employees have completed GDPR training, and our development process follow data protection principles by design and by default and adhere to best information security practices.
Purposes of processing and legal basis
We process personal data only for clearly defined purposes and on specific legal bases (GDRP Article 6) as described in the table below.
During the recruitment process we review your CV and/or LinkedIn profile. We use the contact details provided there only to contact the candidate. We do not use automated decision-making or profiling software in recruitment.
If Trinidad Wiseman provides services to you or your company, or if you submit an enquiry to us via the website contact form, we process personal data. In such cases, sharing certain personal data with us is necessary so that we can respond to your enquiry or provide the service.
We process our customers’ personal data for the preparation, conclusion and performance of customer agreements and offers. In this context we may process, for example, the names, contact details and job positions of company representatives.
The legal basis for such processing is the processing of personal data for the performance of a contract to which the data subject is party, or in order to take steps as the request of the data subject prior to entering into a contract (GDPR Article 6(1)(b)).
Responding to enquiries and customer communication
Data set: Name, email, phone number, enquiry content
Legal basis (GDPR): Contract (Art. 6(1)(b)) where the enquiry relates to concluding or performing a contract; Legitimate interests (Art. 6(1)(f)) for other enquiries
Retention period: 12 months after resolution of the enquiry
Customer agreements and provision of services
Data set: Customer representative’s name, contact details, job position
Legal basis (GDPR): Contract (Art. 6(1)(b)); Legal obligation (Art. 6(1)(c)) to fulfil accounting and other statutory obligations
Retention period: Duration of the agreement + statutory retention period (e.g. 7 years for accounting)
Marketing and customer events
Data set: Contact details, participation, interests, photo, video
Legal basis (GDPR): Consent (Art. 6(1)(a)) for maintaining B2B relations; Legitimate interests (Art. 6(1)(f)) for managing unsubscribe requests
Retention period: Until you unsubscribe or 24 months after last interaction with an inactive contact
Newsletter (Smaily)
Data set: Name, email
Legal basis (GDPR): Consent (Art. 6(1)(a))
Retention period: Until consent is withdrawn
Recruitment (Teamtailor, LinkedIn)
Data set: CV, contact details, profile
Legal basis (GDPR): Consent (Art. 6(1)(a)) for storing candidates in software; Legitimate interests (Art. 6(1)(f)) for data from public sources
Retention period: 12 months from the last contact; up to 36 months only with consent
Web hosting, website security and logs
Data set: IP address, browser, device, time, URL, error logs, performance metrics
Legal basis (GDPR): Legitimate interests (Art. 6(1)(f)) to ensure the security of information systems
Retention period: 6-24 months
Analytics and advertising (Google, Meta, LinkedIn)
Data set: Visit data clicks, device information
Legal basis (GDPR): Consent (Art. 6(1)(a))
Retention period: In accordance with the cookie lifetime
Sales contacts and relationship management (Pipedrive)
Data set: Contact person’s name, work email, phone number, company and job position, communication history and notes, meetings and follow-ups
Legal basis (GDPR): Legitimate interests (Art. 6(1)(f)) to maintain B2B relationships and manage sales opportunities; Contract (Art. 6(1)(b)) if we proceed to an offer/agreement; Consent (Art. 6(1)(a)) if we add the contact to the newsletter
Retention period: During an active business relationship + 24 months from last contact; agreement- related data in accordance with law
Use of third-party tools
To improve the website, optimize marketing activities and enhance user experience, we use the following third-party tools, which may in certain cases process personal data (e.g. IP address, device information or website usage patterns):
- Google Analytics – We use Google Analytics to collect and analyse website usage statistics to better understand how visitors use our website. Google’s privacy policy is available at: https://policies.google.com/privacy
- Meta Pixel – We use the Meta Pixel to assess the effectiveness of Facebook and Instagram advertising campaigns and to understand how users interact with the website after seeing an advertisement. Meta’s privacy policy: https://www.facebook.com/privacy/policy
- LinkedIn Insight Tag – We use the LinkedIn Insight Tag to assess advertising campaign effectiveness and to understand how users interact with the website after seeing an advertisement. More information: https://www.linkedin.com/legal/privacy-policy
- Smaily –We use Smaily to manage newsletters and store contact details on the Smaily platform. Data is accessible only to authorized employees. Smaily’s privacy policy: https://smaily.com/privacy-policy/
- Pipedrive – We use Pipedrive CRM software to manage sales contacts. Contact details stored in Pipedrive and used to manage customer relationships and follow-ups. Access is limited to authorized employees. Pipedrive’s privacy policy: https://www.pipedrive.com/en/privacy
- Web hosting – We use a web hosting service provider to operate our website and related functionality. The service provider may process technical data (e.g. IP address, browser and device information, request URL, date/time, error logs, performance metrics) for the purposes of keeping the website operational, ensuring security, monitoring performance and detecting errors. More information: https://www.veebimajutus.ee/index.php/lepingud-tingimused
- Teamtailor – We use Teamtailor as a recruitment platform to publish job postings, manage candidates and run recruitment processes. Candidate data stored in the platform (e.g. contact details and work-related information provided in the CV or application) is used solely for recruitment purposes. Access is limited to employees involved in recruitment. Teamtailor’s privacy policy: https://www.teamtailor.com/en/privacy-policy/
For these service providers, we implement appropriate data protection measures and use the data collected through their tools only to improve our services and provide more relevant content. More detailed information about each provider’s data processing practices is available on the provider’s website.
We use selected service providers as processors (GDPR article 28), conclude data processing agreements with them, and, where data is transferred outside the EU/EEA, we apply Standard Contractual Clauses (SCCs).
Protection and storage of personal data
To protect personal data and prevent potential misuse, we implement various technical and organizational security measures that comply with applicable data protection and information security requirements.
Retention of personal data
Personal data is retained for as long as necessary to achieve the purposes described above, to comply with a legal obligation, or to protect our rights, including:
- Customer agreement data is retained during the term of the agreement and for the legally prescribed period thereafter;
- Marketing data is retained until consent is withdrawn or for 2 years from the last active interaction;
- In recruitment:
- data of selected candidates is retained for the duration of the employment relationship and deleted 10 years after the end of the employment;
- data of non-selected candidates is retained for 1 years from the date the recruitment decision is made;
- data of candidates on hold, where no final decision has been made and the candidate has consented to storage, is retained for 3 years from the date consent is given.
Newsletter and marketing
We send newsletters only on the basis of your consent. To unsubscribe, click the “unsubscribe” button/link in the footer of the newsletter or notify us at marketing@twn.ee. Once you have unsubscribed, we will no longer send newsletters to you. If you unsubscribed by mistake and still wish to receive newsletters, you can subscribe again by completing the subscription form on our website.
Server logs
Our web servers automatically store the URL, browser and device type, IP address and access time. Logs are used solely to ensure security, resolve technical issues and investigate security incidents. We retain logs for 6-24 months.
Cookie policy
This Cookie Policy applies to data collected from visitors of websites operated by Trinidad Wiseman (registry code: 11244225; address: Meistri 14, 13517 Tallinn, Estonia). It explains what cookies are, how we use them, how third parties may use cookies in the service, what choices you have regarding cookies, and where you can find further information about cookies.
What are cookies?
Cookies are small text files consisting of letters and numbers that are downloaded and stored on a user’s device (for example, a computer, phone or tablet) when visiting a website. Cookies may be used, for example, to store user preferences (such as language settings), analyse the user experience on the website, provide personalized advertisement, and analyse visitor trends.
Some cookies and similar technologies (including pixels) may process personal data (e.g., IP address, device identifier). We use them only with your consent, except for cookies that are strictly necessary for the operation of the website.
The purpose of using cookies is to provide visitors with the best possible user experience, improve the website and show visitors advertisements that may be of interest of them.
Cookie terms
User privacy is important to Trinidad Wiseman, and we strive to provide digital experiences that do not compromise the privacy of our clients and visitors.
You can change your choices at any time in the cookie settings or your browser settings. To remove cookies already installed on your device, you many need to adjust your browser settings or delete cookies manually.
Cookies on our website
We use cookies that may be used when you visit our website. These cookies are divided into two categories based on the purpose for which the information collected vis cookies is used.
- Strictly necessary cookies
These cookies are essential to ensure the basic functionality and security of the website, such as navigating the website. The website cannot function properly without these cookies, and they cannot be disabled as they are necessary for the provision of the service. - Statistics cookies
Statistics cookies collect information about how visitors use our website. Based on the data obtained, we improve website performance and develop its content structure. We use these cookies only with your consent (GDPR Article 6(1)(a)). Consent is voluntary, and withdrawable, and withdrawal does not affect the lawfulness of processing carried out before withdrawal. - Marketing cookies (Meta, LinkedIn)
We use marketing cookies to measure and understand conversions to marketing channels (e.g., campaign performance). We use them only with your consent (GPDR Article 6(1)(a)). You can change your preferences at any time in the cookie settings panel.
Third-party cookies
Our websites may include third-party content and plug-ins (e.g., videos, images, social media plugins or advertisements). These parties may set their own cookies in accordance with their own policies, and such cookies are activated only with your consent.
Disabling cookies
If you wish to restrict the saving of cookies (except strictly necessary cookies required for the operation of the website, which cannot be changed) or delete cookies already stored, you can do so in your browser settings. More detailed instructions can be found in your browser’s help section.
Your rights as data subject
- the right to access your personal data (GDPR Article 15),
- the right to rectification of personal data (GDPR Article 16),
- the right to erasure of personal data (GDPR Article 17),
- the right to data portability (GDPR Article 20),
- the right not to be subject to a decision based solely on automated processing (GDPR Article 22),
- the right to withdraw consent (GDPR Article 7(3)),
- the right to object (GDPR Article 21),
- the right to restriction of processing of your personal data (GDPR Article 18).
Remedies and complaints
- the right to lodge a complaint with a supervisory authority (GDPR Article 77),
- the right to an effective judicial remedy (GDPR Article 79),
- the right to compensation for damage (GDPR Article 82).
To exercise your rights, you may contact the relevant supervisory authority (the Estonian Data Protection Inspectorate (www.aki.ee)) or apply to a court.
Contact and questions
If you have questions, concerns or requests, please contact us. Trinidad Wiseman’s Data Protection Officer (DPO) and our clients’ GDPR consultant is Head of Operations Lauri Esko, who can be reached at privacy@twn.ee.
Together we create a safer digital world!