Effective from: 24.10.2025
Data Controller: SA Narva-Jõesuu Port (hereinafter referred to as us or the Port)
Address: Sadama tee 2, 41702, Toila municipality, Ida-Viru county
E-mail for data queries: sadam@narva-joesuu.ee

Welcome to the website of SA Narva-Jõesuu Port! We care about your privacy. This policy explains what personal data we collect, what we use it for and on what basis, how long we keep it and what your rights are.

1. What data we collect

We collect both actively transmitted and automatically generated data.

1.1. Data that you provide to us (e.g. forms, queries, registrations).

Name, e-mail address, telephone, organisation/office, free text content.

Additional information (preferences, days of participation) when registering for the event.

When subscribing to the newsletter, your e-mail address will be.

Contact and billing details for contractual or tender enquiries.

1.2. Marketing and community work
Newsletter, project announcements and networking correspondence (on request). Photographic and video footage of events (public events; we will always refer to photography on site with a sign).

1.3. Web and analytics
Information collected through cookies and similar technologies (page usage, device/brasuer general data, session). We use WordPress, event and form plugins and analytics (GA4) and, where appropriate, advertising pixels (Meta Pixel). For a more detailed description, see the Cookies Policy and the manager at the foot of the page.

1.4. Technical logging
Server logs (IP address, query time, URL, response code, etc.) for security and reliability.

2. For what purpose and on what legal basis do we use the data

Responding to enquiries and communication – Art 6(1)(b)/(f) GDPR (pre-contractual communication / legitimate interest to clarify enquiries).

Organisation of events (e.g. conferences, workshops, themed days) and management of participation – Art 6(1)(b) (registration, conditions of participation); where applicable, Art 6(1)(a) (consent to special requests).

Newsletter and targeted communications – Art 6(1)(a) (consent; opt-out at any time).

Marketing and project communications (including branding and web activities, statistics) – Art 6(1)(f) (legitimate interest to promote port and project services/activities); Art 6(1)(a) for cookies.

Photographic and video coverage of events (public events, news value) – Art 6(1)(f); where portraiture is used to focus on an individual, we will seek consent where possible Art 6(1)(a).

Contract performance and billing – Art 6(1)(b) and accounting obligations Art 6(1)(c).

Web security, troubleshooting and fraud prevention – Art 6(1)(f).

4. International transmissions

Where we use services provided by providers outside the EU/EEA (e.g. Google/Meta), GDPR-compliant safeguards (e.g. EU standard terms and conditions and/or a compliance decision) will be ensured for the transfer. Cookie-based transfers will only take place with your consent (see cookie manager).

5. Retention periods

Enquiries and correspondence: up to 3 years after last contact (based on the statute of limitations for disputes).

Event registers: up to 2 years after the event (reporting/disputes); lists will not be used for marketing purposes without explicit consent.

Newsletter: until consent is withdrawn (unsubscribe).

Contract/Accounting: 7 years (or longer by law).

Event photo/video: generally 3 years for public information and historical record purposes (archival material may be kept longer for public interest).

Logs and security data: generally up to 12 months unless longer retention is required.

6. Cookies and web analytics

We use functional, statistical and (subject to agreement) marketing cookies. A cookie preferences manager is displayed on the first visit, where you can enable/disable categories and change preferences at any time from the bottom of the page. Analytics are set to IP anonymous and aggregated statistics where technically possible. See the Cookies policy for more details.

7. Security measures
We implement technical and organisational measures: access restrictions, log management, backup, encrypted connection (HTTPS), regular updating of plugins/platform and contracts with authorised processors.

8. Your rights

You have the right under the GDPR to:

• Access to your data;
• The right to rectification and erasure (the right “to be forgotten”);
• Right to restriction of processing and right to object (including marketing);
• Data portability (machine-readable copy);
• Right to withdraw consent (e.g. cookies, newsletter) – withdrawal does not affect the lawfulness of the previous processing;
• Right to lodge a complaint with the Data Protection Inspectorate.

To exercise your rights, please write to: sadam@narva-joesuu.ee
We will normally reply within 30 days.

9. Data on children
Our services are not aimed at children under 13. If we become aware of the collection of a minor’s data without parental consent, we will delete it within a reasonable time.

10. Third-party sites and social media
Our website may link to partner sites or social media channels (e.g. Facebook/Instagram). The privacy practices of these platforms are at their own discretion; we recommend that you review the terms and conditions of the respective services.

11. Policy changes

We may update the policy to reflect legislation, services or technology. Updates will be published on the website with their effective date. Significant changes will be communicated separately (e.g. by banner or email where applicable).

Contact for data protection matters

SA Narva-Jõesuu Port
Sadama tee 2, 41702, Toila parish, Ida-Viru county
E-mail: sadam@narva-joesuu.ee