---
layout: ../layouts/PageLayout.astro
title: Privacy Policy
description: Privacy Policy for xahau.network
---

# Privacy Policy

_Last updated: 1 July 2025_

This Privacy Policy explains how we collect, use, and protect your personal data when you visit [xahau.network](https://xahau.network). We are committed to complying with the General Data Protection Regulation (GDPR) and respecting your rights.

## 1. Who We Are

The website xahau.network is operated by:

**INFTF MTU**  
Registration number: 80586600  
Address: Ringtee 15, Kuressaare, Estonia 93815  
Email: [info@inftf.org](mailto:info@inftf.org)

INFTF MTU is the data controller for this website.

## 2. Data We Collect

We may collect the following categories of personal data:

- **Usage data** (e.g. pages visited, time spent on site)
- **Analytics data** (e.g. IP address, browser type, device information)

We do **not** collect personal identifiers like your name or email address unless you actively provide them.

## 3. How We Collect Data

We collect data using:

- **Cookies and similar technologies**  
  (You are asked to consent to this when you first visit the site.)

- **Third-party analytics tools**  
  (These tools may collect usage information for statistical and security purposes.)

## 4. Purpose of Data Processing

We use the data we collect for the following purposes:

- **Analytics**: To understand and improve how our website is used.
- **Security**: To detect and prevent abuse or malicious activity.

## 5. Legal Basis for Processing

We process your data under the following legal bases:

- **Consent**: For analytics and non-essential cookies.
- **Legitimate interests**: To ensure the security and integrity of our website.

## 6. Cookies and Tracking Technologies

We use cookies to collect analytics and improve website performance. When you visit our site, a banner allows you to choose whether to accept or decline non-essential cookies.

For more information, please refer to our [Cookie Policy](/privacy-policy) (link to be added).

## 7. Data Sharing

We do **not** share your personal data with third parties.

## 8. Data Retention

We retain analytics data for up to **12 months**, after which it is deleted or anonymized.

## 9. Data Transfers Outside the EU

We do **not** transfer personal data outside the European Union.

## 10. Your Rights Under GDPR

You have the right to:

- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a supervisory authority

To exercise your rights, contact us at [info@inftf.org](mailto:info@inftf.org).

## 11. Age Limitations

Our website is not specifically intended for children, but we do not impose an age restriction.

## 12. Supervisory Authority

You have the right to file a complaint with the Estonian Data Protection Inspectorate:

**Andmekaitse Inspektsioon**  
Website: [https://www.aki.ee](https://www.aki.ee)  
Phone: +372 627 4135  
Email: [info@aki.ee](mailto:info@aki.ee)

## 13. Updates to This Policy

We may update this policy from time to time. The most recent version will always be available on this page, and the date of the last update will be indicated at the top.

For any questions regarding this Privacy Policy, please contact us at [info@inftf.org](mailto:info@inftf.org).
