Privacy Notice


This is a description of how your personal data is collected and used while you visit our website and share or input information on our website.

The controller of your personal data is Raalio OÜ, registry code 16705553, address Rataskaevu 2 Tallinn 10123, Estonia (“Raal”, “we”, “us”).

How do we get personal information?

The personal information we process is provided to us directly by you when you fill in web-forms or use our services and contact us for requests or support.

In addition, we may also collect your personal data indirectly. When visiting our website, we and our service providers may collect certain data using tracking technologies like cookies, web beacons, and similar technologies. 

The use of cookies is presented in our website cookie banner, where you can also choose to reject non-essential cookies.

Indirectly collected data may fall under the terms of third-party privacy policies while they act as independent data controllers. Please read those separately.

What kind of data is processed by us and why

Processing activity

Data categories


Legal basis

Contact us or Book a Demo First name, Last name, Company, Email, Message content Providing the service Contract
Service order  Order details, Company name, Contact person email, payment information  Providing the service Contract
Details of the person from whom the devices are collected  First Name, Last Name, Email, Phone Number, Collection address Providing the service Contract
Details of the person who receives the devices First Name, Last Name, Email, Phone Number, Delivery address Providing the service Contract
Payment information and billing Client identification data, billing details Required by law and Providing the service Legal obligation and Contract
Website maintenance and quality assurance IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only) Providing the website and functionalities Legitimate interest
Website activity tracking Data collected by web-cookies, website behavior data Collecting statistical information Legitimate interest
Marketing activities related to our services Company E-mail, web-forms inserted company data B2B Marketing Legitimate interest


Sharing your personal data

Any data you provide will not be publicly displayed or shared to others. Our employees and business partners have access to personal data to the extent necessary for the performance of their work duties and is covered with confidentiality obligations. 

We use third party processors to help provide our service. 

Why and with whom we share your personal data?

Categories of Recipients Reason for sharing
Service providers  We work with service providers that work on our behalf which may need access to certain personal data to provide their services to us. These companies include those we have hired to operate the technical infrastructure that we need to provide service and assist in protecting and securing our systems and services as well as for business management. 
To receive more information about our service providers and business partners, please contact us  
Payment service provider We use payment service provider(s) in our services. In case you make any payments as private person to us you acknowledge the payment service-related data processing in addition to our data processing. Payment service providers act as separate data controllers that intermediates transactions between clients and us. For more information, please contact us 


Ensuring the security of personal data

We have taken necessary technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against the unauthorized disclosure, abuse or other processing in violation of applicable law.

Retention and deletion of personal data 

The storage period of personal data depends on the purpose we process the data. 

Data Type Purpose Retention Time
Payment and billing information Fulfilling the legal obligation and Contract 7 years + current fiscal year after the transaction
Service provision related personal data (details of the person from whom the devices are collected and to whom it is delivered) Providing the service 3 years after the  provision of the service
IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only) Providing the website and functionalities

Depending on the cookie retention time and website technical settings. 

Retention times may vary from one session or 1 day up to 2 or 3 years if not deleted manually earlier. 

Marketing related data Marketing Until unsubscribed from the marketing


Your rights and preferences

Under data protection law, you have rights including:

  1. Right to be informed and to access. You may get information regarding your personal data processed by us.
  2. Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party. 
  3. Right to erasure. You have the right to have personal data we process about you erased from our systems if the personal data are no longer necessary for the related purposes. 
  4. Right to object and restrict. You have the right to object to the processing of your personal data and restrict it in certain cases.
  5. Right to rectification. You have the right to make corrections to your personal data. 
  6. Right to withdraw consent. When you have given us consent to process your personal data, you may withdraw said consent at any time.

To exercise any of the abovementioned rights, please contact  We will respond to your requests within 30 days. 

Dispute resolution

If you have questions or concerns about our use of your personal information, please feel free to contact us at You may also lodge a complaint to the supervisory authority, the Estonian Data Protection


This Privacy Policy was updated February 2024.