Privacy Policy

1. Who we are

FORMAPRO OÜ is the data controller for forma-pro.com.

2. Information we collect

Contact forms

Depending on the form you use, we may collect your name, company, email address, message, attached files, and project or context information that you choose to provide. Some compact forms ask only for the details shown on that form.

Job applications

We may collect your name, email address, LinkedIn profile or other contact information you provide, CV or resume, application message, and uploaded supporting documents. Your CV and application may contain additional information that you choose to include.

Technical information

Our hosting, security and form infrastructure may process technical information such as your IP address, browser or user-agent information, requested URL, request timestamp, and basic server or security logs.

3. Why we use the information

We use information to:

• respond to business enquiries;
• discuss potential projects, services or cooperation;
• process job applications;
• operate, maintain and secure the website;
• prevent spam and automated abuse; and
• understand website usage when a visitor has consented to analytics.

We do not use this website for advertising or retargeting profiling.

4. Contact and application recipients

Business enquiries are available only to Forma Pro employees who need the information for their work. Depending on the enquiry, this may include Sales, technical leadership or CTO functions, and other relevant employees.

Job application information may be available to HR and employees involved in the recruitment and hiring process.

Contact and application submissions are delivered through email and Google Workspace/Gmail.

5. Analytics

Google Analytics 4

With your analytics consent, we use Google Analytics 4 to understand aggregate website traffic, page usage, traffic sources, and interaction or conversion events. Our custom analytics events are designed not to send names, email addresses, phone numbers, message text, CV filenames, form contents, or other personal information entered into forms.

Contentsquare

With your analytics consent, we use Contentsquare to understand navigation, interaction patterns and usability, including heatmaps or session behaviour where those features are enabled. Form fields and sensitive data must be masked or excluded from capture.

Google Analytics and Contentsquare scripts are not loaded until you explicitly accept analytics and are enabled only on the production hostname.

6. Cookies and similar technologies

Necessary

Necessary technologies are always active. They support core website operation, security, form protection, and storage of your privacy preference.

Analytics

Analytics technologies are optional and include Google Analytics 4 and Contentsquare. They are activated only after you choose “Accept analytics”. We do not use an advertising or marketing cookie category because the website does not use advertising or retargeting technologies.

7. Cloudflare Turnstile

We use Cloudflare Turnstile to protect contact and job application forms from automated abuse and spam. Turnstile is treated as necessary security functionality and does not depend on analytics consent.

8. Data retention

Business enquiries and correspondence are retained for as long as reasonably necessary to handle the enquiry, maintain relevant business records, and satisfy applicable legal or operational requirements.

Job application information is retained for as long as reasonably necessary for the recruitment process and related legal or operational requirements.

Technical and analytics information is retained according to operational needs and the settings or retention controls of the relevant service. Forma Pro does not state a fixed retention period here where no confirmed company-wide schedule has been established.

9. Service providers and processors

We use a limited set of service providers to operate the website and handle enquiries. These include:

• Google Workspace/Gmail for contact and application delivery;
• Google Analytics, when analytics consent is granted;
• Contentsquare, when analytics consent is granted;
• Cloudflare for Turnstile form protection; and
• hosting and infrastructure providers involved in website delivery, including Fly.io.

These providers process information only in connection with the services they provide.

10. International transfers

Some service providers may process information outside the European Economic Area. Where this occurs, the relevant provider and Forma Pro rely on applicable contractual or legal transfer safeguards.

11. Your rights

Depending on the circumstances and applicable law, you may have rights to access, correct or delete your personal information; restrict or object to processing; receive portable data where applicable; and withdraw consent at any time.

To exercise a right, contact info@forma-pro.com. You may also complain to the competent supervisory authority. For FORMAPRO OÜ in Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

12. Changing or withdrawing analytics consent

You can change your analytics choice at any time by using the “Privacy choices” link in the website footer. Rejecting analytics does not affect access to the website, contact forms, job applications, or necessary security functionality.

13. Changes to this Privacy Policy

We may update this policy when the website, services or legal requirements change. The “Last updated” date identifies the current version. A material change to analytics consent can be accompanied by a new consent version so that visitors are asked to make a fresh choice.