Introduction
This is a description of how your personal data is collected and used while you visit our website https://raal.io/ and share or input information on our website.
The controller of your personal data is Raalio OÜ, registry code 16705553, address Rataskaevu 2 Tallinn 10123, Estonia ("Raal", "we", "us").
How do we get personal information?
The personal information we process is provided to us directly by you when you fill in web-forms or use our services and contact us for requests or support.
In addition, we may also collect your personal data indirectly. When visiting our website, we and our service providers may collect certain data using tracking technologies like cookies, web beacons, and similar technologies.
The use of cookies is presented in our website cookie banner, where you can also choose to reject non-essential cookies.
Indirectly collected data may fall under the terms of third-party privacy policies while they act as independent data controllers. Please read those separately.
What kind of data is processed by us and why
| Processing activity | Data categories | Purpose | Legal basis |
|---|---|---|---|
| Contact us or Book a Demo | First name, Last name, Company, Email, Message content | Providing the service | Contract |
| Service order | Order details, Company name, Contact person email, payment information | Providing the service | Contract |
| Details of the person from whom the devices are collected | First Name, Last Name, Email, Phone Number, Collection address | Providing the service | Contract |
| Details of the person who receives the devices | First Name, Last Name, Email, Phone Number, Delivery address | Providing the service | Contract |
| Payment information and billing | Client identification data, billing details | Required by law and Providing the service | Legal obligation and Contract |
| Website maintenance and quality assurance | IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only) | Providing the website and functionalities | Legitimate interest |
| Website activity tracking | Data collected by web-cookies, website behavior data | Collecting statistical information | Legitimate interest |
| Marketing activities related to our services | Company E-mail, web-forms inserted company data | B2B Marketing | Legitimate interest |
| Enhanced advertising tracking (Reddit Ads) | Hashed email, hashed phone number, external identifiers | Advertising attribution and improved targeting | Consent |
| Enhanced advertising tracking (Google Ads) | Cookie and device identifiers, website behaviour data, approximate location (country level), and Google account signals when you are signed in to Google | Advertising attribution, remarketing audiences, and cross-device and demographic reporting | Consent |
Sharing your personal data
Any data you provide will not be publicly displayed or shared to others. Our employees and business partners have access to personal data to the extent necessary for the performance of their work duties and is covered with confidentiality obligations.
We use third party processors to help provide our service.
Why and with whom we share your personal data?
| Categories of Recipients | Reason for sharing |
|---|---|
| Service providers | We work with service providers that work on our behalf which may need access to certain personal data to provide their services to us. These companies include those we have hired to operate the technical infrastructure that we need to provide service and assist in protecting and securing our systems and services as well as for business management. To receive more information about our service providers and business partners, please contact us info@raal.io |
| Payment service provider | We use payment service provider(s) in our services. In case you make any payments as private person to us you acknowledge the payment service-related data processing in addition to our data processing. Payment service providers act as separate data controllers that intermediates transactions between clients and us. For more information, please contact us info@raal.io |
| Reddit Ads platform | When you consent to enhanced advertising tracking, we share hashed (encrypted) versions of your email and phone number with Reddit Ads for improved ad attribution and targeting. This data is anonymized and cannot be used to identify you directly. You can opt out at any time through our forms or by contacting us. |
| Google Ads platform | When you accept advertising cookies in our cookie banner, Google Analytics shares your website activity with Google so that we can measure advertising performance, build remarketing audiences in Google Ads, and see cross-device and demographic reporting. We do not send your name, email address or phone number to Google for this purpose. Google acts as a separate data controller for this processing. You can withdraw your consent at any time in the cookie banner. |
Ensuring the security of personal data
We have taken necessary technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against the unauthorized disclosure, abuse or other processing in violation of applicable law.
Retention and deletion of personal data
The storage period of personal data depends on the purpose we process the data.
| Data Type | Purpose | Retention Time |
|---|---|---|
| Payment and billing information | Fulfilling the legal obligation and Contract | 7 years + current fiscal year after the transaction |
| Service provision related personal data (details of the person from whom the devices are collected and to whom it is delivered) | Providing the service | 3 years after the provision of the service |
| IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only) | Providing the website and functionalities | Depending on the cookie retention time and website technical settings. Retention times may vary from one session or 1 day up to 2 or 3 years if not deleted manually earlier. |
| Marketing related data | Marketing | Until unsubscribed from the marketing |
Your rights and preferences
Under data protection law, you have rights including:
Right to be informed and to access. You may get information regarding your personal data processed by us.
Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party.
Right to erasure. You have the right to have personal data we process about you erased from our systems if the personal data are no longer necessary for the related purposes.
Right to object and restrict. You have the right to object to the processing of your personal data and restrict it in certain cases.
Right to rectification. You have the right to make corrections to your personal data.
Right to withdraw consent. When you have given us consent to process your personal data, you may withdraw said consent at any time.
Enhanced Advertising Tracking Opt-Out
If you have previously consented to enhanced advertising tracking, you can opt out at any time by:
- Unchecking the enhanced tracking option in any of our forms
- Rejecting or withdrawing advertising cookies in our website cookie banner, which is what controls the Google Ads tracking
- Contacting us directly at info@raal.io
- Your consent preferences are stored locally and expire automatically after 30 days
To exercise any of the abovementioned rights, please contact info@raal.io. We will respond to your requests within 30 days.
Dispute resolution
If you have questions or concerns about our use of your personal information, please feel free to contact us at info@raal.io. You may also lodge a complaint to the supervisory authority, the Estonian Data Protection Inspectorate, info@aki.ee
This Privacy Policy was updated September 2026.