privacy notice
This notice explains what personal data this website processes, why, on what legal basis, and what rights you have. It is written to the UK GDPR and the EU GDPR, both of which apply to this service.
Last updated: 15 October 2026.
1. Who is responsible
The controller for the processing described here is:
Exigon Consulting OÜUus-Sadama tn 21, Kesklinna linnaosa
10120 Tallinn, Harju maakond, Estonia
Registration number 12497164 · VAT EE101648361
Email: [email protected] · Telephone: +372 644 4990
We have not appointed a data protection officer, as we are not required to. Data protection enquiries go to the email address above.
2. Visiting the website
When you open a page, your browser necessarily sends technical data to our hosting provider, which records it in server log files: IP address, date and time of the request, the page requested, the referring page, and your browser and operating system version.
This is processed on the basis of our legitimate interest (Article 6(1)(f) UK/EU GDPR) in delivering the site securely and reliably, and in detecting and investigating attacks. Log data is retained for a short period — normally no more than 30 days — and is then deleted. It is not combined with other data and is not used to build a profile of you.
3. Cookies and storage
We set no analytics cookies of our own. This site uses one item of local browser storage,
fk_consent_v1, to remember your answer to the cookie notice so that the notice is not shown on every
page. That entry stays in your own browser, is not transmitted to us, and can be removed by clearing your
browsing data.
The Taboola measurement pixel described in section 4 may set a cookie or similar identifier of its own on content pages.
Fonts, icons, stylesheets and images are served from this website's own domain. Apart from the Taboola pixel, no other third-party script, font or content-delivery network is called when you load a page.
4. Measurement and advertising
Readers reach some of our articles through sponsored placements on native-advertising platforms. To measure how those placements perform, this website uses the Taboola pixel, provided by Taboola Europe Limited and its group companies.
The pixel is a small script, loaded from cdn.taboola.com, that records a page view on our content
pages. In doing so it processes your IP address, the page you are on, the referring page, and your browser and
device information, and it may read or write a Taboola cookie or identifier in your browser. This allows us and
Taboola to count visits that resulted from a sponsored placement and to measure campaign performance. Taboola
may also use the data for its own purposes as a controller, including audience measurement and advertising;
their own privacy policy at
taboola.com/policies/privacy-policy
describes that processing and offers an opt-out.
Where the pixel runs, and where it does not. It is present on content pages — the homepage, articles, section pages and the newsletter page. It is not present on this privacy notice, the imprint, the terms, the contact page or the newsletter thank-you page.
Please note: the pixel currently loads when a content page opens, which is before you answer the cookie notice. We state this plainly rather than claim otherwise. If you do not want this processing, you can block the script with a browser content blocker or browser privacy settings, use the opt-out offered by Taboola at the link above, or contact us at [email protected]. We keep this arrangement under review.
Data processed through the pixel may be transferred outside the UK and the EEA, including to the United States. Such transfers are covered by standard contractual clauses or another transfer mechanism permitted under the UK and EU GDPR.
If you arrive from an advertising platform, the link may carry campaign parameters in the URL. If you subscribe to the newsletter, those parameters may be passed to our email provider so we can tell which campaign a subscription came from. They do not identify you personally.
5. The newsletter
If you subscribe to the weekly bulletin, we process the email address you enter and the fact and time of your consent.
We use a double opt-in procedure: after you submit the form we send one email asking you to confirm, and the subscription only begins when you click the link in it. We record the confirmation, with its timestamp and the IP address used, as evidence that consent was given — this is required of us and is processed on the basis of our legal obligation and legitimate interest in demonstrating compliance.
The legal basis for sending the newsletter itself is your consent (Article 6(1)(a) UK/EU GDPR). You may withdraw it at any time, with effect for the future, using the unsubscribe link in any edition or by emailing us. Your address is deleted when you unsubscribe, apart from a suppression record kept so that we do not contact you again by mistake. It is used only to send this newsletter and is not sold, rented or passed to third parties for their own purposes.
6. Contacting us
If you email or telephone us, we process the details you provide in order to answer you (Article 6(1)(b) and (f) UK/EU GDPR). Correspondence is kept for as long as needed to deal with the matter and to meet retention obligations, then deleted.
7. Processors and recipients
We use service providers who process data on our instructions under a written data-processing agreement: a hosting provider for the website and server logs, and an email service provider for the newsletter. Taboola, described in section 4, receives data through the measurement pixel and acts as a controller in its own right for some of that processing. We do not sell personal data. Data is disclosed to a public authority only where the law requires it.
Where a provider processes data outside the UK or the EEA, the transfer is covered by an adequacy decision or by standard contractual clauses with appropriate safeguards.
8. Your rights
You have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive data you provided in a portable format. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of what was done before.
To exercise any of these rights, email [email protected]. We respond within one month.
You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in Estonia it is the Data Protection Inspectorate, Andmekaitse Inspektsioon (aki.ee).
9. Security
This website is served over an encrypted TLS connection, shown by the padlock in your browser. We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
10. Changes
We update this notice when the site or the processing changes. The date at the top shows the current version.