Last updated: November 6, 2026
The controller of the personal data processed through the websites redmeteors.eu and redmeteors.com is Xolo Go OÜ - Kirill Nikulin (Red Meteors), registry code 14717109, VAT number EE102156920, business address Paju tn 1a, 50603 Tartu, Tartu Maakond, Estonia ("we," "us"). For any privacy question or request, write to [email protected].
When you send a request through the contact form, we receive the name, email address, phone number and message you enter, together with the address of the page, the referring website, the campaign (UTM) parameters of your visit, the time between loading the form and sending it, your IP address, and the browser headers that state your language, accepted content formats and platform. We keep this information with your request and use it to answer the request and to prepare a proposal or media plan. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or, where you contact us on behalf of a company, our legitimate interest in answering business inquiries (Article 6(1)(f) GDPR).
An email address and a phone number are required to send the form; the name and the message are optional. Without an email address and a phone number we cannot answer your request.
If you have accepted analytics in the cookie banner, the form also sends technical details about your browser and device: browser and operating system, screen and window size, color depth, pixel ratio and touch support, preferred languages, time zone and local time, whether cookies are enabled and the Do Not Track setting, online status and page visibility, connection type, speed and latency, data-saver setting, device memory and processor cores, and graphics hardware. We use them to see from which devices and settings requests are sent and to help us recognize automated submissions. Legal basis: your consent (Article 6(1)(a) GDPR). Without that consent, the form does not read or send these details.
When the form is submitted, our server records your IP address and request headers, counts submissions per IP address, and flags requests from network ranges that sent automated spam. Legal basis: our legitimate interest in protecting the website and our inbox (Article 6(1)(f) GDPR).
When you open the website, our hosting server and our content delivery and protection provider process your IP address and request data to deliver the pages and to protect the site against attacks. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). The fonts are served from our own server; your browser does not contact Google to load them.
Only after you click "Accept" in the cookie banner do we load Google Analytics (Google) and Yandex Metrica (Yandex). These services set cookies and collect information about your visit, such as the pages you view, clicks, whether a contact-form request was sent, your device and browser, and an approximate location derived from your IP address, so that we can see how the website is used. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time with "Cookie Settings" at the bottom of our pages. After withdrawal the analytics scripts no longer load; cookies they already set stay in your browser until they expire or you delete them. Withdrawal does not affect processing that took place before it.
We store your cookie choice and your color theme in your browser's local storage, so that the website remembers them. This data stays in your browser and is not sent to us.
If you become our client, we process contact and billing details to perform the contract (Article 6(1)(b) GDPR) and keep accounting records as the law requires (Article 6(1)(c) GDPR). We may also email clients about discounts, website news and special offers, based on our legitimate interest in keeping clients informed (Article 6(1)(f) GDPR); you can opt out at any time by writing to us.
We do not sell personal data.
Telegram, Cloudflare, Google and Yandex may process data outside the European Economic Area, including in countries for which the European Commission has not issued an adequacy decision. These countries may not offer the same level of data protection as the EEA. We use these services on their standard terms. You can ask us for information about the safeguards that apply to a transfer.
You have the right to access your personal data, to have it corrected or erased, to restrict its processing, and to receive it in a portable format. Where processing is based on your consent, you can withdraw it at any time. To exercise these rights, write to [email protected]; we reply within one month.
Right to object. You can object at any time to processing based on our legitimate interests, including direct marketing. We then stop that processing unless we show compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims. We always stop processing for direct marketing when you object.
You can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the data protection authority of the country where you live or work.
We do not make decisions about you based solely on automated processing.
We protect personal data with technical and organizational measures, including encrypted connections (HTTPS) and access limited to the people who need it.
We may update this policy. The current version, with the date of its last update, is always available at https://redmeteors.eu/privacy.