Last updated: Jul 4, 2026

Privacy Policy

At Hansato Europe, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website.

1. Who We Are

Hansato Europe OÜ is a B2B supply chain services company registered in Estonia. We provide logistics from Asia, EU trade compliance, import/export clearing, procurement services, and market entry consulting.

Controller details
Company name: Hansato Europe OÜ
Registry code: 17568549
Registered address: Sepapaja tn 6, 15551 Tallinn, Estonia – European Union
Email:
Phone: +372 699 1530

We are the data controller within the meaning of Article 4(7) of the GDPR. This means we determine the purposes and means of processing your personal data.

2. What This Policy Covers

This Privacy Policy applies to personal data collected via:

Our website: hansato.com

Contact forms, email inquiries, and quote requests

Customer and prospect communications

It does not apply to third-party websites, services, or platforms that we do not operate (e.g., LinkedIn, X/Twitter, or other external sites we link to).

3. What Personal Data We Collect and Why

We collect only the personal data that is necessary for the purposes described below. This reflects our commitment to data minimisation and privacy by design.

3.1 Data You Provide Voluntarily

When you contact us via our website contact form, request a quote, or send us an email, we may collect:

Data Category	Examples	Purpose
Contact information	Name, email address, phone number	To respond to your inquiry
Company information	Company name, your job title	To understand your business context and provide relevant services
Message content	Details of your request or question	To process your request and follow up

Legal basis: This processing is based on our legitimate interest (Art. 6(1)(f)) in responding to business inquiries and providing our services. Where you request a specific service or quote, it may also be based on pre-contractual measures (Art. 6(1)(b)).

4. Cookies and Consent

4.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help us understand how you use our site and improve your experience.

4.2 Types of Cookies We Use

Type	Purpose	Consent Required?
Strictly necessary cookies	Enable core website functionality (e.g., session management, security). These are essential for the website to work.	No
Analytics cookies	Enable us to analyse website traffic and usage via self-hosted Matomo.	Yes

4.3 Your Consent Choices

When you first visit our website, a cookie banner will appear asking for your consent to use analytics cookies.
If you accept: Matomo will set first-party cookies and collect anonymised usage data.
If you decline: No analytics cookies will be set, and Matomo will not track your visit.
If you ignore the banner: No cookies will be set, and tracking will not start.
You can change your consent preferences at any time by clicking the “Cookie Preferences” link in our website footer.

4.4 How to Manage or Delete Cookies

You can also manage or delete cookies directly in your browser settings. Most browsers allow you to:
– See what cookies are stored
– Delete individual cookies or all cookies
– Block all cookies (including strictly necessary ones – note that this may break some website functionality)
– Set preferences for specific websites

For more information, consult your browser’s help documentation or visit www.aboutcookies.org.

6. Job Applicant Data

When you apply for a position at Hansato Europe OÜ through our Careers page, we collect, store, and use the personal data you provide in your application.

What Data We Collect
We collect the information you choose to give us, which typically includes:
– Your name and contact details (email, phone number)
– Your CV/Resume, which contains your employment history, education, and qualifications
– Any information you include in your cover letter or application form

How We Use Your Data
We process your data for the following purposes:
– To assess your suitability for the role you’ve applied for
– To communicate with you about your application
– To keep records related to our hiring process

Legal Basis for Processing
We process your data based on the necessity of taking steps, at your request, prior to entering into an employment contract (Article 6(1)(b) of the GDPR). Where we are required to comply with employment and related laws, this may also be based on a legal obligation (Article 6(1)(c) GDPR).

How Long We Keep Your Data
If your application is unsuccessful, we will retain your data for a period of 6 months after the end of the recruitment process. This allows us to address any potential claims regarding our hiring decisions. After this period, your data will be securely deleted. If we wish to keep your data for a longer period to consider you for future roles, we will ask for your explicit consent.

7. Who We Share Your Data With

We do not sell your personal data.

Because we self-host Matomo on our own servers, Matomo’s creators (InnoCraft Limited) do not process your data on our behalf. We are the sole controller and processor of analytics data.
We share your data only with trusted service providers who process data on our behalf (data processors). All processors are located within the EU and are bound by Data Processing Agreements under Article 28 GDPR.

Recipient	Purpose	Location
Web hosting provider	To host our website and store contact form submissions	EU
Email service provider	To manage email communications (if you contact us)	EU

Your data is not transferred outside the European Economic Area (EEA). If we ever need to transfer data internationally, we will implement appropriate safeguards (e.g., Standard Contractual Clauses) as required by Chapter V of the GDPR.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Data Category	Retention Period
Contact inquiries and quote requests	Up to 24 months after the last communication, or as needed to provide follow-up services
Email correspondence	Duration of communication plus up to 12 months
Job applicant data (CV, cover letter, etc.)	6 months after the recruitment process ends
Matomo analytics data	Anonymised data is stored for a limited period (typically configurable; we use a short retention period)
Security logs (if collected)	7–30 days, used only for security and troubleshooting

In some cases, we may retain data for longer if required to comply with legal obligations (e.g., accounting, tax laws) or to defend legal claims. Once data is no longer needed, we delete or anonymise it.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right	What it means
Right of access (Art. 15)	You can request confirmation of whether we process your data and request a copy.
Right to rectification (Art. 16)	You can correct inaccurate or incomplete data.
Right to erasure (Art. 17)	You can request deletion of your data where no lawful basis for processing exists.
Right to restriction (Art. 18)	You can restrict how we process your data in certain cases.
Right to data portability (Art. 20)	You can receive your data in a structured, machine-readable format.
Right to object (Art. 21)	You can object to processing based on legitimate interest (e.g., analytics).
Right to withdraw consent (Art. 7)	You can withdraw your consent for analytics tracking at any time via the cookie preferences link or by contacting us.

To exercise your rights, contact us at:

We will respond within 30 calendar days as required by the GDPR.

10. Your Right to Lodge a Complaint

If you believe your rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
Estonian Data Protection Inspectorate
Tatari 39, 10134 Tallinn, Estonia
Email:
Website: https://www.aki.ee
You may also seek a judicial remedy in the courts of Estonia or the EU member state where you reside.

11. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, or alteration, including:

– HTTPS encryption (SSL certificate) for secure browsing
– Access controls – only authorized personnel can access personal data
– Secure hosting with EU-based providers
– Regular backups of website data

We conduct periodic risk assessments and follow the principle of privacy by design – data protection is considered at every stage of our operations. The Estonian Data Protection Inspectorate recommends online retailers implement measures such as regular security audits, encryption, and clear consent mechanisms for non-essential cookies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices. The latest version will always be available at hansato.com/privacy.
We will notify you of material changes by updating the “Last updated” date at the top of this policy. If the changes are significant, we may also provide a notice on our website.

Contact Us

If you have any questions about this Privacy Policy, your data, or how we process your information, please contact us:

Hansato Europe OÜ

Sepapaja 6
15551 Tallinn
Estonia
European Union

+372 699 1530