Privacy policy

Who to contact

Best in Estonia is responsible for the personal information handled through this website. Contact admin@brooklake.group about privacy, your information, or this notice. You can also use our contact form.

1. What we collect

Most public pages can be read without sending us personal information. If you contact us, submit a listing, suggest an event, or send a correction, we collect the information you choose to provide, such as your name, email address, message, listing details, venue links, event details, and any notes needed to review the submission.

Comments include the name, optional website, email and text you supply. Approved comments may show your name, website and comment publicly; your email is not displayed. Do not include sensitive personal information about yourself or others in a submission.

2. How we use submissions

We use submitted information to reply, verify listings, update guides, moderate suggested places or events, prevent spam, and maintain the quality of the directory. We may edit, format, or decline submissions before publication.

We rely on legitimate interests in answering requests, maintaining an accurate public guide, moderating contributions and protecting the service. Information needed to respond to a request is used for that request, not added to a marketing list. No automated decision with legal or similarly significant effects is made about visitors.

3. Cookies and analytics

The public site does not currently use advertising cookies, cross-site tracking pixels, or behavioral analytics. The private editor uses a strictly necessary authentication cookie so authorized editors can stay signed in. Read the cookie policy for its name, purpose, and duration.

If you dismiss the small privacy note, your browser remembers that choice in session storage for the current tab. This is not advertising consent and does not enable tracking. The newsletter signup is not active.

4. Maps and third-party services

Map pages load Leaflet from unpkg and map tiles from OpenStreetMap. Your browser may contact those services when a map is shown. External links to venues, social networks, ticketing pages, booking providers, and official tourism resources are controlled by those third parties and their own privacy policies.

Map requests disclose technical information such as your IP address, browser information and the tiles requested. See the OpenStreetMap Foundation privacy policy and unpkg for provider information. Directions and ticket links open separate services only when followed.

5. Hosting and storage

The site runs on Cloudflare infrastructure. Place and event information, media details, editor state, and visitor submissions may be stored in Cloudflare services. Cloudflare may process limited technical logs as part of hosting, security, and reliability.

Authorized editors can access submitted information to review and respond to it. We do not sell personal information. Hosting and map providers operate internationally, so technical information may be processed outside your country or the EEA. Cloudflare describes its processing and applicable international-transfer safeguards in its privacy policy and data processing addendum.

6. Retention and removal

We keep submitted information for as long as it is useful for operating the site, reviewing listings, handling corrections, or maintaining a public record. To request a correction, removal, or export of information you sent to us, contact us with the relevant page URL and enough context to find the record.

Retention depends on whether a request is still open, a contribution remains published, or information is needed for security, a dispute or a legal obligation. We review removal requests individually; there is no promise that submitting a form starts an automatic deletion timer. Public business and event information can also come from official venue or organiser pages and our imported editorial archive.

7. Your data protection rights

Where applicable, you can request access, correction, deletion, restriction or portability of your personal information and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may need proportionate information to verify your identity. We normally respond within one month; if a permitted extension is needed, we will explain why.

You can complain to your local data protection authority, including Estonia’s Andmekaitse Inspektsioon. Contacting us first can help resolve the issue but does not remove your right to complain. The guide does not require children to provide personal information.