1. General Provisions

1.1. Baltic Transfer Company is a trade name (brand name) used by RIDGI OÜ (registration code XXXXXXXX, Estonia, Tallinn). All rights to the brand, website, and content belong to RIDGI OÜ.
1.2. This Privacy Policy (hereinafter referred to as the “Policy”) regulates the processing and protection of personal data of users of the website https://baltic-transfer.com (hereinafter the “Website”) and services provided by the Company.
1.3. The Company processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the legislation of Estonia.
1.4. By using the Website and providing their data (via booking forms, online payment, contact forms), the User confirms their consent to this Policy.
1.5. The Company reserves the right to update this Policy. The new version comes into force once published on the Website.

2. Data Collection

2.1. The Company collects and processes the following categories of data:

• Name, surname, email, phone number (via booking and contact forms).

• Booking details (route, address, date, number of passengers, additional services).

• Technical data: IP address, cookies, language, time zone, device and browser information.

• Communication with customer support (email, messengers, phone calls).

• Payment data — via payment providers (Stripe, bank transfer). The Company does not store card details.

2.2. Data is obtained through:

• filling in forms on the Website,

• making bookings,

• online payments,

• automatic collection (cookies, analytics).

3. Data Use

The Company uses personal data for:

• registering and processing bookings,

• communicating with customers (phone, email, messengers),

• issuing invoices and processing payments,

• complying with legal obligations (taxation and accounting),

• protecting the Company’s legitimate interests,

• analytics and service improvement,

• personalized marketing and advertising.

4. Data Sharing

The Company may share data with:

• payment providers (Stripe, banks),

• notification services (EmailJS, Telegram API),

• analytics providers (Google Analytics, Meta Pixel),

• public authorities if required by law,

• transport partners in case of subcontracted bookings.

The Company does not sell user data to third parties.

5. Data Storage and Deletion

• Booking and payment data is stored for 5 years (in line with Estonian accounting law).

• Cookies are stored from one session up to 12 months.

• Users may request deletion or correction of their data by writing to info@baltic-transfer.com.

• Some information may remain anonymized or retained if legally required.

6. User Rights

Under GDPR, Users have the right to:

• access their data,

• correct inaccurate data,

• request deletion (“right to be forgotten”),

• restrict processing,

• withdraw consent,

• data portability,

• file a complaint with the Estonian Data Protection Inspectorate (AKI).

7. Cookies

7.1. The Website uses cookies for:

• technical operation (proper website display and forms),

• analytics (Google Analytics),

• functionality (saving form inputs),

• advertising (Google Ads, Facebook Pixel).

7.2. Users can disable cookies in their browser, but some functions may be limited.

8. International Data Transfers

8.1. Data is processed in the EU (Estonia).
8.2. When using third-party services (Google, Stripe, Telegram, EmailJS), data may be transferred outside the EU.
8.3. The Company applies GDPR safeguards such as Standard Contractual Clauses (SCC).
8.4. The same level of data protection applies to clients from non-EU countries (e.g., Russia).

9. Policy Updates

The Company may update this Policy without prior notice. The current version is always available on the Website.

10. Contact Information

RIDGI OÜ (Baltic Transfer Company)
📍 Tallinn, Estonia
📧 info@baltic-transfer.com
📞 +372 5599 1555

Supervisory authority:
Estonian Data Protection Inspectorate (AKI)
https://www.aki.ee