Privacy notice
What personal data Second Wind collects, why, how long we keep it and what rights you have. In short: we collect as little as possible, never sell it, and you can ask us to delete it at any time.
Last updated: 3 November 2026
Who is responsible for your data
Second Wind is run by Madrid Babajev in Tallinn, Estonia, who is the controller of the personal data described here. For any question or request about your data, write to madrid.babajev@secondwind.ee.
What we collect
When you request a free audit: your name, business name, website address and email, and if you choose to give them, your phone number, preferred language and message. The form opens your own email app, so the request reaches us as a normal email.
When you contact us or become a client: your messages, contact and billing details, and the material you share for your project.
When we look for businesses we could help: publicly available business contact details, for example from the Estonian e-Business Register, Google Maps or the company’s own website. We use them only to contact the business about our services.
When you visit this website: no cookies, no analytics and no tracking. Like any web server, our hosting provider keeps short technical logs (such as IP address, browser and time of visit) to keep the site secure and running.
Why we use it and on what legal basis
To answer your request and prepare your audit: steps before a possible contract, and our legitimate interest in replying to you.
To deliver the work we agree on and invoice it: performance of a contract, and our obligations under Estonian accounting law.
To contact businesses about our services, with an easy opt-out in every message: our legitimate interest. You can object at any time and we will stop.
To keep the website secure: our legitimate interest.
We never sell your data, and we never use it to make automated decisions about you.
How long we keep it
Audit requests and conversations that don’t lead to a project: up to 12 months after our last contact.
Contracts, invoices and accounting records: 7 years, as Estonian accounting law requires.
Business contact details used for outreach: until you opt out or we no longer need them. We regularly delete details that have gone stale.
Technical server logs: only for the short period set by our hosting provider.
Who we share it with
Only with service providers that help us run Second Wind, such as our email and web hosting provider and our accountant, and only as much as they need.
When we build an AI assistant or another tool for a client, the client decides how their customers’ data is used, and we process it on their behalf under a written agreement. Any additional platforms are agreed with the client in advance.
We keep data in the European Union wherever possible. If a provider processes data outside the EU, we make sure appropriate safeguards are in place, such as the European Commission’s standard contractual clauses.
Your rights
You can ask to see the data we hold about you, correct it, delete it, limit how we use it, or receive it in a portable format. You can object to direct marketing at any time. Write to madrid.babajev@secondwind.ee and we will reply within one month.
If you think we have handled your data wrongly, you can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
Changes to this notice
If we change how we handle personal data, we will update this page and the date above.