Privacy Policy

Last updated: July 31, 2026

This Privacy Policy describes how belvvent collects, uses, and protects your personal information. We are committed to safeguarding your privacy and handling your data responsibly. We provide guided mushroom foraging walks in belvvent National Park and operate this website to share information about our services and wild mushroom identification experiences.

Who We Are

We operate as a data controller for personal information collected through our website and services. We comply with the General Data Protection Regulation (GDPR) and Estonian data protection laws. Our mission is to provide authentic nature experiences while respecting your privacy and maintaining transparent practices about how we use your information.

Information We Collect

We collect information in several ways to provide and improve our services:

• Contact Form Data: When you contact us through our website, we collect your name, email address, phone number, and message content.
• Booking Information: If you book a guided walk, we collect your contact details, booking preferences, and any special requirements you specify.
• Usage Data: We automatically collect information about how you interact with our website, including pages visited, time spent, and device information.
• Cookies: We use cookies to enhance your browsing experience and analyze site performance. These are explained in detail in our Cookie Policy.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you voluntarily submit information through contact forms or booking requests, you consent to our processing of that data.
• Legitimate Interest: We process usage data to improve our website functionality, security, and user experience.
• Legal Obligation: We may process information when required by Estonian law or regulations.
• Performance of Contract: We process booking and contact information to fulfill your requests for guided walks and services.

How We Use Your Information

We use the information we collect for specific purposes:

• To respond to your inquiries and provide customer support
• To confirm and manage your guided walk bookings
• To send you updates about our services and upcoming walks
• To improve our website functionality and user experience
• To analyze site performance and visitor behavior
• To maintain website security and prevent fraud
• To comply with legal obligations

We never sell, trade, or rent your personal information to third parties. We do not use your data for marketing purposes without your explicit consent.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Messages: Retained for up to 24 months after your last interaction with us, or until you request deletion.
• Booking Information: Retained for 12 months following the completion of your guided walk for customer service and dispute resolution purposes.
• Analytics and Cookie Data: Retained for up to 12 months to analyze site performance and user behavior trends.
• Server Logs: Retained for up to 12 months for security and troubleshooting purposes.
• Email Communications: Retained for 24 months unless you unsubscribe from our mailing list.

After the retention period expires, we delete or anonymize your data. You may request earlier deletion by contacting us at any time.

Your Privacy Rights

Under GDPR and Estonian law, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of all personal data we hold about you.
• Right to Rectification: You can correct inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can limit how we process your information.
• Right to Data Portability: You can request your data in a structured, portable format.
• Right to Object: You can object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: If you provided consent for processing, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details provided in the Contact Us section below.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and gather analytics about how visitors use our website. Cookies are small text files stored on your device. We use essential cookies for website functionality and analytical cookies to understand user behavior. You can control cookie settings through your browser preferences. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses SSL encryption for data transmission. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you have concerns about security, please contact us immediately.

Third-Party Links and Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services before providing your personal information. This Privacy Policy applies only to information collected through our website.

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take immediate steps to delete such information. Parents or guardians who believe we have collected information from a child should contact us immediately.

International Data Transfers

We operate within the European Union and store data primarily in Estonia. If we transfer personal information internationally, we do so in compliance with GDPR requirements and implement appropriate safeguards to protect your data.

Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) if you believe we have violated your data protection rights. You can contact them directly if you have concerns about our data handling practices that we cannot resolve.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our website following such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.