Privacy Policy

Last updated: January 29, 2026

LaResto OÜ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services.

1. Data Controller

The data controller responsible for your personal data is:

LaResto OÜ
Estonia, European Union
Email: [email protected]

2. Information We Collect

We may collect the following types of information:

• Account Information: Email address and authentication data when you create an account
• Usage Data: Information about how you interact with our services
• Device Information: Device type, operating system, and app version
• Communication Data: When you contact us for support

3. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Send transactional communications (e.g., authentication emails)
• Respond to your inquiries and support requests
• Improve and optimize our services
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract: Processing necessary to provide our services to you
• Legitimate Interest: Processing for service improvement and security
• Consent: Where you have given explicit consent
• Legal Obligation: Processing required by law

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Service Providers: Third parties that help us operate our services (e.g., cloud hosting, email delivery)
• Legal Requirements: When required by law or to protect our rights

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to certain types of processing

To exercise these rights, contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9. International Transfers

Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place to protect your data.

10. Cookies

Our website may use essential cookies to ensure proper functionality. We do not use tracking or advertising cookies.

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: [email protected]