Privacy Policy

1. Controller

plusRS OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia. Registry code: 17182790 · VAT ID: EE103002866. Email: privacy@plusrs.com. We have not appointed, and are not required to appoint, a Data Protection Officer. This policy covers personal data processed via the plusrs.com website. For the opexone.io website, see the Privacy Policy at opexone.io/privacy. For the opexONE application, see the opexONE App Privacy Policy at opexone.io/privacy/app.

2. No Tracking on This Website

The plusrs.com website uses no analytics, tracking, or advertising technologies and sets no tracking cookies. Fonts are self-hosted. Only strictly-necessary storage required to serve the site securely is used, so no cookie banner is required (ePrivacy Directive Art. 5(3)).

3. What We Process, and Why

a) Server logs. Our hosting provider (Amazon Web Services) processes technical data (IP address, timestamp, requested page, browser type) in server and application logs to deliver the site securely and detect abuse. Legal basis: legitimate interest in site security, IT integrity, and abuse detection (Art. 6(1)(f) GDPR, Recital 49). Hosting and application logs under our control are retained for a maximum of 30 days, then deleted automatically.

b) Contact form. Messages (name, email, company, message) are processed solely to handle your enquiry and are received in our Microsoft 365 mailbox. Legal basis: Art. 6(1)(b) and (f) GDPR. Correspondence is kept as long as needed for the enquiry and any statutory retention.

c) Spam and abuse prevention. A hidden honeypot field and IP-based rate-limiting briefly process the submitting IP address. Legal basis: Art. 6(1)(f) GDPR, Recital 49.

d) No automated decision-making within the meaning of Art. 22 GDPR takes place on this website. Rate-limiting is a purely technical measure.

4. Recipients and Transfers

Processors for this website: Amazon Web Services (hosting via Amazon CloudFront, AWS Lambda and Amazon S3; outbound email via Amazon SES) and Microsoft 365 (Microsoft Ireland Operations Limited / Microsoft Corporation — receiving and storing our email correspondence). Transfers outside the EEA are safeguarded by the EU–US Data Privacy Framework (AWS under the Amazon.com, Inc. certification; Microsoft Corporation certified) with EU Standard Contractual Clauses as fallback. We use no analytics, advertising, or tracking providers and do not sell personal data.

5. Your Rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection to legitimate-interest processing (Art. 21) — via privacy@plusrs.com. You may lodge a complaint with a supervisory authority; our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, +372 627 4135, info@aki.ee — or the authority of your residence or workplace.

6. Security and Changes

The website is served exclusively over TLS. We update this policy as the website or legal requirements change; every content change bumps the version and date shown on this page.