Privacy

This page says what personal data the ECCM website collects, why and for how long we keep it, and how you stay in control of it.

1. Who we are

The controller of your data is MTÜ Eesti Nüüdismuusika Keskus (Estonian Centre of Contemporary Music, ECCM), registry code 80603988, Herne 11A, 10135 Tallinn, Estonia. For any question about your data, write to info@eccm.ee.

2. Newsletter

When you subscribe to the newsletter we keep your email address, the language you chose and when you subscribed and confirmed. We use the address only to send you the ECCM programme and news.

The basis is your consent. Subscribing takes two steps: after you send the form we email you, and the subscription starts only when you open the link in that email. Nothing is sent to an address that has not been confirmed.

We keep the address until you leave. Every letter ends with a link that unsubscribes you in one click, and after that we send you nothing more. You can also leave by writing to info@eccm.ee.

3. Contact form

With the contact form you send us your name, email address and message. We store them and send them to our mailbox info@eccm.ee so that we can answer you. To limit repeated sending we also keep a hash of your IP address. It is a one-way code from which the address cannot be recovered, and we use it only to count how many messages came from one address in the last hour.

The basis is our legitimate interest in answering you when you contact us. The message is deleted from the website's database after one year. The copy in our mailbox is kept as long as we need it to answer and deal with your matter.

4. Service providers

The website runs on Cloudflare's services: hosting, the database, file storage and sending email. Cloudflare is our processor and handles the data only on our behalf, under Cloudflare's Data Processing Addendum. Cloudflare logs requests (such as the IP address, the time and the page opened) for security and to find faults, and keeps them for a short time. On the contact form, Cloudflare Turnstile checks that the sender is a person.

Cloudflare may process data outside the European Union, including in the United States. Such transfers rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

Some pages show a YouTube or Vimeo video. Before you click it you see only a picture served from our own server, and nothing is loaded from YouTube or Vimeo. When you click, the video loads from youtube-nocookie.com or player.vimeo.com, and from then on Google's privacy policy or Vimeo's privacy policy applies.

There are no other third parties on the site: fonts and pictures come from our own server.

5. Cookies and browser storage

The website sets no cookies. The only thing we keep in your browser is the theme you pick (light or dark). It stays in your browser's own storage and never reaches us. We count page views without identifying anyone: for each page shown we keep its address, the site you came from, your country and the page's language, and never your IP address. These counts are kept for three months. We use no advertising tracking.

6. Your rights

You have the right to ask what data we hold about you and to get a copy of it. You have the right to have wrong data corrected and your data deleted. You have the right to object to processing based on our legitimate interest. You can withdraw your consent at any time, which does not make earlier processing unlawful.

Write to info@eccm.ee and we will answer within one month. If you think we have handled your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Last changed 8 November 2026.