Privacy policy.

1. Data controller

The controller is Pikema Sõpruse Päev SA. Contact us at info@pikemsoprus.ee.

2. Data we collect

• Registration: first name and surname, email, county and an optional phone number.
• Friend invitations: friends' names and email addresses and your personal message. These details are used only to send the invitation.
• Newsletter: email address.
• Website use: technical information required for operation and aggregate statistics.

3. Why we use it

• to organise registration and contact you;
• to deliver invitations and personal messages;
• to send the newsletter when requested;
• to measure the campaign's impact and improve the website.

Our legal bases are your consent and our legitimate interest in organising the campaign under Article 6(1)(a) and (f) UK/EU GDPR.

4. Service providers

We do not sell data or share it for third-party marketing. Trusted hosting, email and database providers process data only on our instructions under appropriate data-protection terms.

5. Retention

Registration details are retained only as long as needed to organise the campaign, and no longer than three years after the most recent campaign. Newsletter details are kept until you unsubscribe.

6. Your rights

You may request access, correction or deletion, withdraw consent and lodge a complaint with the Estonian Data Protection Inspectorate. Contact info@pikemsoprus.ee.

7. Cookies

We use only essential technical storage, such as your language preference. We do not use advertising or third-party tracking cookies.

8. BMI and voluntary measurement sharing

BMI is calculated on your device. Sharing is not required to calculate your result. We send a measurement only after explicit consent in the separate sharing dialogue; the consent option is off by default.

A shared measurement contains sex, age group (20–39, 40–49, 50–59 or 60+), height rounded to the nearest centimetre, weight rounded to the nearest kilogram and BMI calculated from those rounded values. A random one-use measurement identifier prevents duplicate retries, and a timestamp supports retention. We do not link it to a name, email, registration, account, device identifier, cookie or IP address stored by our application.

The absence of a name does not automatically guarantee complete anonymity. Hosting providers may process technical logs containing an IP address and request time; their retention depends on the provider. We do not add measurements to application diagnostic logs.

The purpose is campaign aggregate statistics. The legal basis is voluntary explicit consent under Article 6(1)(a), and Article 9(2)(a) where health data is involved, of the EU GDPR. Individual measurements are automatically deleted within 90 days. An hourly check starts deletion one hour before the deadline. Only category counts grouped by sex and age remain afterwards.

Public statistics require at least 50 shared measurements. Non-empty categories or groups below 20 measurements are not displayed or made inferable from the other counts. These are measurements, not unique people or a representative survey of Estonia. TAI population context is separately labelled with its source, year and actual age range.

Sharing does not affect your result or campaign registration. We cannot find a measurement by your name or email because those details are not linked to it. You can always choose not to share future measurements. For data-protection questions, contact info@pikemsoprus.ee.

9. Changes

Any updated version will be published here with a new effective date.