Privacy Policy

Last updated: July 2026

1. Who we are

Gotan (hereinafter "we", "us", or "our") is a digital marketing agency registered in Estonia.

• Company: Gotan (sole proprietorship)
• Jurisdiction: Estonia, European Union
• Data Controller: Gotan (sole propiertorship registered in Estonia)
• Contact email: info@gotan.ai
• Website: https://gotan.ai

We are the data controller for the personal data collected through our website.

2. What personal data we collect

We collect only the information you voluntarily provide to us through our contact / booking form on the Book a Call page (https://gotan.ai/book-a-call).

This typically includes:

• Full name
• Email address
• Company name (if provided)
• Phone number (if provided)
• Project details or message (any information you choose to share about your needs)

We also collect certain information automatically via Google Analytics (see Section 4 — Cookies and Analytics).

3. How we collect your data

You provide data directly when you:

• Fill in the Book a Call form on our website.
• Communicate with us via email (horacio@gotan.ai or info@gotan.ai).

We also collect data automatically through cookies and analytics tools (see Section 4).

4. Cookies and Analytics

We use Google Analytics to understand how visitors use our website. Cookies on this site fall into two categories:

• Essential cookies — always active, used only to store your cookie preferences and support core website functionality. These cannot be disabled.
• Analytics cookies (Google Analytics) — disabled by default. Loaded only after you grant consent through our cookie banner.

Google Analytics uses cookies to collect anonymous information such as:

• Pages visited
• Time spent on the site
• Browser type and device information
• Approximate geographic location (city-level)

This data is used to improve our website and marketing efforts. Google Analytics processes this data on our behalf. You can learn more about how Google handles data at: https://policies.google.com/privacy

Your cookie choices: You can change your cookie preferences at any time via the Cookie Settings link in the website footer. Most browsers also allow you to control cookies through their own settings, and you can opt out of Google Analytics tracking generally by installing the following browser add-on: https://tools.google.com/dlpage/gaoptout

Google Analytics cookies are only placed after you provide your consent through our cookie banner. You may withdraw your consent at any time by changing your cookie preferences or disabling cookies in your browser.

5. Lawful basis for processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following lawful grounds:

We process the information you submit through the contact form because you have requested information about our services and we have a legitimate interest in responding to your enquiry.

6. How we use your data

We use the data you provide solely for:

• Responding to your inquiry or project request.
• Communicating with you about potential services.
• Sending relevant follow-ups related to your expressed interest.
• Improving our website and services (aggregated analytics data).

We do not:

• Sell your personal data to third parties.
• Use your data for automated decision-making or profiling (other than standard analytics).
• Share your data with third parties for their own marketing purposes.

7. Data retention

We retain personal data collected through the Book a Call form for a period of up to 24 months after the last contact, unless:

• A longer retention period is required by law (e.g., tax and accounting records — 7 years under Estonian law).
• You request earlier deletion of your data.

Google Analytics data is retained for 26 months as per standard Google Analytics settings.

8. Data sharing and third parties

We share your data only with essential service providers:

All third parties are GDPR-compliant and process data within the European Economic Area (EEA) or under adequate safeguards (Standard Contractual Clauses).

How the form works

When you submit the Book a Call form, you will receive an automated email confirmation acknowledging receipt. After that, we (a real person) will review your inquiry and respond to you manually — there is no automated booking system involved.

9. Your rights under GDPR

As a data subject in the European Union, you have the following rights:

• Right to access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — Request deletion of your data, subject to legal retention obligations.
• Right to restrict processing — Request that we limit how we use your data.
• Right to data portability — Request your data in a structured, machine-readable format.
• Right to object — Object to our processing of your data based on legitimate interest.
• Right to withdraw consent — Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact us at:

Email: horacio@gotan.ai
Or: info@gotan.ai

We will respond to your request within 30 days as required by GDPR.

10. Security logging

Our hosting provider (Vercel Inc.) and we may collect technical log information — such as IP addresses, browser types, and request timestamps — for security, fraud prevention, and system administration purposes. This data is retained for a limited period and is not used for any other purpose.

11. Data security

We take appropriate technical and organisational measures to protect your data, including:

• Secure (HTTPS) connection on our website.
• Access controls on email and business accounts.
• Use of reputable, GDPR-compliant third-party services.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. Business transfer

If Gotan is sold, merged, or reorganised, personal data may be transferred as part of that transaction, subject to applicable data protection laws.

13. International transfers

Your data is processed within the European Economic Area where possible. Where third-party services may transfer data outside the EEA (e.g., Google Analytics), such transfers are governed by Standard Contractual Clauses (SCCs) as approved by the European Commission.

14. Supervisory authority

If you believe we have not handled your data in compliance with GDPR, you have the right to lodge a complaint with your local data protection authority or with the Estonian data protection authority:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Website: https://www.aki.ee
Email: info@aki.ee
Address: Väike-Ameerika 19, 10129 Tallinn, Estonia

15. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

16. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: info@gotan.ai