Legal · Data protection

Privacy Policy

We take the protection of your personal data seriously. This policy explains what data we collect when you use this website or contact us, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR / DSGVO). The IT Outsource 360 website is operated in partnership with ClickClickPlay OÜ.

Last updated: 27 August 2026

1Controller

The controller responsible for data processing on this website within the meaning of the GDPR is the operating company. The IT Outsource 360 website is operated in partnership with ClickClickPlay OÜ.

2Data we collect

You can visit this website without actively providing personal data. When you get in touch with us through our contact form, we collect the information you enter so that we can respond to your enquiry:

• First and last name
• Email address
• Phone number (if provided)
• Company name (if provided)
• The type of service you are interested in and the details of your project message

We use this data solely to process and answer your enquiry and to contact you about it. We do not use it for unrelated purposes, and we do not create user profiles from it.

CRM and contact management (HubSpot)

To process and manage your enquiry we use the CRM system HubSpot, provided by HubSpot Ireland Limited (1 Sir John Rogerson's Quay, Dublin 2, Ireland), part of the HubSpot group whose parent company HubSpot, Inc. is based in the USA. When you submit the contact form, the data you enter is stored in HubSpot so that we can respond to and follow up on your request.

HubSpot acts as a processor on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. In this context data may be transferred to the USA; such transfers are safeguarded by the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Further information is available in HubSpot's privacy policy at legal.hubspot.com/privacy-policy. The legal basis is Art. 6 (1) (b) and (f) GDPR as set out below.

3Legal basis

We process the data you send us on the following legal bases:

• Art. 6 (1) (b) GDPR - processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract with you.
• Art. 6 (1) (f) GDPR - processing is based on our legitimate interest in responding to enquiries, communicating with prospective and existing clients, and running our business efficiently.

Where we rely on your consent - for example for optional analytics - the legal basis is Art. 6 (1) (a) GDPR, and you may withdraw that consent at any time with effect for the future.

4Data security

Your data is transmitted in encrypted form via TLS/SSL. We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse, and we review these measures on an ongoing basis.

We do not sell your personal data. We only share it with processors who help us operate the website and answer your enquiry (for example our hosting provider), on the basis of data processing agreements, or where we are legally required to disclose it.

We keep enquiry data only for as long as necessary to handle your request and to meet any statutory retention obligations, after which it is deleted.

5Cookies & analytics

Essential storage

By default we use only essential storage. This includes remembering your cookie consent choice so that we do not ask you again on every visit. This storage is required for the website to work as you expect and does not need your consent.

Analytics (only with your consent)

We use Google Analytics, loaded via Google Tag Manager, to understand how this website is used and to improve it. Analytics runs only after you have given your consent through our cookie banner. It processes pseudonymous device and usage data (such as pages viewed, approximate region and browser type) and does not run at all if you decline.

You can withdraw your consent at any time via the cookie settings. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before then.

6Hosting

This website is hosted on servers located in the European Union. Fonts and other assets are self-hosted and served directly from our own infrastructure, so no data is transferred to US font or asset providers simply by loading a page.

By default the site loads no US trackers. Any optional analytics is activated only after your explicit consent, as described above.

7Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15) - to obtain confirmation of whether and how we process your data.
• Right to rectification (Art. 16) - to have inaccurate data corrected or incomplete data completed.
• Right to erasure (Art. 17) - to have your data deleted where the legal conditions are met.
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20) - to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21) - to object to processing based on our legitimate interest.
• Right to withdraw consent at any time, with effect for the future.
• Right to lodge a complaint with a supervisory authority (Art. 77) if you believe our processing infringes data protection law.

To exercise any of these rights, simply contact us using the details below.

8Contact

If you have any questions about this privacy policy or about how we handle your data, please contact us at hello@itoutsource360.com. We are happy to help.