GDPR Compliance

Privacy Policy and Controller Scope

Talvera Systems OÜ operates as the data controller for website technical logs and direct institutional enquiries. Customer identification records for the Salipay platform are processed directly by our licensed partner institution.

Processing Principles

Data categories and retention periods

We collect information strictly limited to technical website logs, browser metadata, and direct inbound communications submitted via our partnership contact forms. All processing operations comply fully with Regulation (EU) 2016/679 (GDPR), relying on legitimate business interests for technical security and explicit consent for inbound enquiries.

All customer identification, transactional records, and onboarding documentation pass directly to the licensed partner institution under strict data processing agreements. Digital infrastructure resides exclusively within European Union member state data centers, ensuring zero unauthorized third-party transfers outside the EEA.

Data subject rights and supervisory oversight

You hold the right to request access, rectification, erasure, or restriction of your personal data. Contact our privacy team at privacy@talvera.systems or lodge complaints with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).