Sarona

Privacy Terms GDPR Sign in

Privacy Policy

01 Who we are

K&G Media OÜ (registry code 16170827), an Estonian company operating the Sarona lead intelligence platform at sarona.dev. References to "we," "our," or "Sarona" in this policy mean K&G Media OÜ.

02 What data we collect

• Business contact information — name, work email, company, job title of B2B prospects
• Usage data — emails opened, links clicked, replies received, engagement signals
• Account data — tenant company name, user emails, login timestamps
• Website visitor data — IP address, pages visited, timestamps, referrers

03 Legal basis for processing (GDPR Article 6)

• Legitimate Interest (Article 6(1)(f)) — for B2B cold outreach to business contacts in roles relevant to our tenants' offerings
• Contract performance (Article 6(1)(b)) — for operating tenant accounts, processing payments, delivering the service
• Legal obligation (Article 6(1)(c)) — where we must retain data for tax, accounting, or regulatory reasons

04 How we use data

• To identify and contact potential business customers on behalf of our tenants
• To operate, maintain, and improve the Sarona platform
• To provide analytics, reporting, and performance insights to our tenants
• To communicate service updates, security notices, and account administration

05 Data retention

• Prospect data — retained for up to 12 months after last contact, then deleted or anonymised
• Account data — retained for the duration of the contract plus 3 years for legal and audit purposes
• Backup data — rolling 7-day window on encrypted backups, automatically purged

06 Your rights under GDPR

You have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest, including direct marketing
• Right to lodge a complaint with the Estonian Data Protection Authority — Andmekaitse Inspektsioon

To exercise any of these rights, contact privacy@sarona.dev.

07 Subprocessors

We use the following trusted third parties to process data on our behalf:

08 Contact

09 Data Processing Agreement

A Data Processing Agreement (DPA) is available on request for all business tenants. Email privacy@sarona.dev to obtain a copy.