This is a translation for convenience. In case of any discrepancy, the Estonian version prevails.

SIIN Privacy Policy

Last updated: 18.10.2026

At SIIN, we value your privacy. We want you to know what data we collect, why we use it and how you can control your data.

This privacy policy applies to the use of the SIIN mobile application, the siinapp.ee website and their related services.

You can also discover public content on SIIN without creating a user account.

1. Who is responsible for your data?

The SIIN service is provided by, and the controller responsible for processing personal data is:

MANFOR OÜ
Registry code: 16977858
Address: Holmi kallas 18a, Haapsalu linn, Haapsalu linn, Lääne maakond, 90502, Eesti
Email: info@siinapp.ee
Website: https://siinapp.ee

If you have any questions about the processing of personal data or wish to exercise your data protection rights, please write to us at info@siinapp.ee.

2. What data do we process?

We process personal data to the extent necessary to provide and operate SIIN services and ensure their security.

User account data

When you create a SIIN account or sign in, we process:

• your email address;
• your user account's unique identifier;
• technical data relating to account creation and sign-in;
• information relating to authentication and account security.

You sign in using a one-time six-digit verification code sent to your email address. You do not need to create a password.

Profiles and published content

If you create a provider profile, add a place or publish an event, activity, deal or daily special, we may process:

• your name or company name;
• descriptions and introductory texts;
• your telephone number and email address;
• website and social media links;
• photos and other uploaded files;
• addresses, locations and coordinates;
• event dates, times and participation conditions;
• offer prices and validity periods;
• data relating to publication and management.

Some of this data may be publicly visible to all SIIN users, including those who are not signed in.

If you add your personal contact details to a public profile or public content, other people may also be able to see them.

Management rights and invitations

If you request management rights for a place or invite another person to manage a place, we may process:

• your user account identifier;
• data about the place or provider profile being managed;
• the management role and status;
• information submitted to substantiate your entitlement to management rights;
• the invitation recipient's email address;
• technical data relating to the request or invitation.

This data is used to verify, grant and securely administer management rights.

Enquiries and problem reports

If you contact us or report a problem, we process the information you provide, the contact details associated with your enquiry and the information needed to resolve the problem.

Problem reports are used to review content, handle potential infringements and improve the security of the service.

Technical data

Technical data may be processed to ensure the operation and security of the service, such as:

• technical information relating to requests and use of the service;
• error messages and diagnostic data;
• authentication and session data;
• logs relating to security and the prevention of misuse.

We do not use this data to monitor your private life without justification.

3. Using SIIN without an account

You can browse public content on SIIN without a user account.

Without an account, you can explore places, events, activities, providers and offers, listen to audio stories, save favourites and use supported calendar and reminder functions.

Favourites and local reminders are stored on your device. In the current implementation, they are not automatically synchronised across devices.

An account is needed primarily to create and publish content and to manage places and provider profiles.

4. Location data

SIIN allows you to discover content based on a selected area.

You do not need to share your phone's GPS location to select an area. You can select the area yourself.

If you add a place, event or activity, we may process the address and location coordinates you enter.

When you search for an address, the address query you enter may be sent to the Land and Spatial Development Board's In-ADS address service.

If you open directions in an external map application, destination data may be sent to the relevant map service provider.

The core functions of the current SIIN application do not automatically collect your phone's precise GPS location.

5. Photos and other files

If you upload a photo or another permitted file to SIIN, it is used to display and manage the content you select.

Published photos may be visible to all users. Some public files may also be accessible via a direct link.

Uploaded files may contain personal data, such as images of recognisable people or technical metadata.

Before publishing a photo or other material, make sure you have the necessary rights and a proper basis for disclosing other people's personal data.

6. Favourites, calendar and reminders

SIIN allows you to save favourites and set local reminders.

Data for these functions is stored mainly on your device.

If you wish to receive reminders, the application will request permission to send notifications where necessary.

If you add an event or activity to your phone's calendar, the event name, date, time, location and other relevant information are used to create the calendar entry.

If you use a cloud-synchronised calendar, your calendar service provider may process the saved information under its own terms.

Deleting your account does not automatically remove events already saved to an external calendar.

You can manage application permissions in your phone's settings.

7. For what purposes and on what legal bases do we process data?

We process personal data in accordance with the European Union's General Data Protection Regulation (GDPR).

Where processing is based on consent, you can generally withdraw it at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

8. With whom may we share data?

SIIN uses technical service providers necessary for the operation of the service.

These may include:

Supabase – user account authentication, database, server functions and file storage.

Email delivery services – sending sign-in codes, necessary service messages and administrative notifications.

Land and Spatial Development Board's In-ADS – address searches and refinement of address data.

Map and media services – displaying maps, external images and location information.

Machine translation service – translating texts intended for publication, when the relevant function is in use.

We disclose data to service providers only to the extent necessary for the relevant service to operate and in accordance with applicable data protection requirements.

The profile and contact details you publish yourself may also be visible to all SIIN users.

We do not sell users' personal data.

9. Machine translation

SIIN may use machine translation to make descriptions of places, providers, events and offers available in different languages.

Texts intended for publication may be sent to a translation service provider for translation.

Machine translation may contain inaccuracies. For important dates, prices and participation conditions, we recommend checking the original text or contacting the content publisher where necessary.

The processing of personal data through the translation service is subject to applicable data protection requirements.

10. Transfers of data outside the European Economic Area

Some technical service providers used by SIIN may process data outside the European Economic Area.

If personal data is transferred to such a country, we use safeguards provided for by applicable law, such as a European Commission adequacy decision or appropriate contractual safeguards.

You can request further information about personal data transfers at info@siinapp.ee.

11. How long do we retain data?

We retain personal data only for as long as necessary to fulfil the purpose of processing or comply with statutory obligations.

The general principles are as follows:

• Account data: while the account is in use and, after the account is deleted, only to the extent that there is a legal basis for retention.
• Published profiles and content: for as long as their publication or management is necessary and lawful.
• Management rights requests and invitations: for the time needed to process them and, where necessary, resolve issues relating to rights and security.
• Problem reports: for the time needed to review and resolve them and, where necessary, handle disputes.
• Technical logs: for the time needed to ensure the security and reliability of the service.
• Backups: in accordance with technical retention rules and justified recovery needs.
• Data on the device: for as long as it is retained on the device or until the user removes it.

When there is no longer a legal basis for retaining data, we delete or anonymise it.

12. Deleting your account

Users can delete their account at any time in the app by selecting My SIIN → Settings → Delete account and confirming deletion.

Deleting an account removes the user account, associated personal data and management rights. Provider profiles managed solely by that user and their associated content are removed from public view. Shared provider profiles and content belonging to other managers are retained.

Public places remain even if the user was their sole manager. Local data and reminders associated with the account are deleted, and the user is signed out.

Account deletion is free of charge. Further information: https://siinapp.ee/konto-kustutamine

If there is a statutory obligation or another applicable legal basis to retain a particular category of personal data, we may retain that data only to the extent necessary.

If you wish to have additional personal data deleted or no longer have access to your account, please write to info@siinapp.ee.

13. Your rights

Under the General Data Protection Regulation, subject to applicable conditions and exceptions, you have the right to:

• receive information about the processing of your personal data;
• access the personal data processed about you;
• request rectification of inaccurate data;
• request erasure of your personal data;
• request restriction of the processing of personal data;
• object to processing based on legitimate interest;
• in certain cases, receive your data in a machine-readable format and transfer it to another service provider;
• withdraw your consent where processing is based on consent.

To exercise your rights, please write to info@siinapp.ee.

We generally respond to valid requests within one month. In cases provided for by law, this period may be extended, and we will inform you of this.

If you believe that your personal data has been processed unlawfully, you have the right to contact the Estonian Data Protection Inspectorate: https://www.aki.ee.

14. Data security

We use technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

These include authentication, restriction of access rights, database access rules and monitoring of service security.

However, no internet-based service can guarantee absolute security.

15. External links and services

SIIN may contain links to websites, social media channels, booking platforms and registration forms of other companies and organisers.

The relevant service provider's privacy policy and terms of use may apply when using these services.

We recommend reviewing them before submitting your data.

16. Website, cookies and analytics

The SIIN website may use technical cookies or similar storage technologies necessary for the operation of the service.

If we use analytics or other technologies that require consent, we will request it before implementing the relevant technology.

You can restrict or delete cookies in your browser settings. Disabling certain necessary technologies may affect the operation of the website.

17. Changes to the privacy policy

We may update this privacy policy if legislation, SIIN functions or personal data processing principles change.

The current version is available at https://siinapp.ee/privaatsus.

Where necessary, we will notify users of significant changes through the application or another suitable channel.

18. Contact

If you have questions about the use of personal data or wish to exercise your rights, please contact us.

MANFOR OÜ
Registry code: 16977858
Address: Holmi kallas 18a, Haapsalu linn, Haapsalu linn, Lääne maakond, 90502, Eesti
Email: info@siinapp.ee
Website: https://siinapp.ee