Privacy Policy

Last updated: 5 August 2026

This Privacy Policy explains how personal data is collected, used and protected when you visit kibiva.energy (the "Website"). We are committed to protecting your privacy and handling your personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Estonian law.

1. Who we are (Data Controller)

The Website is operated by, and the controller of your personal data is:

ImpactScope OÜ
Jõe tn 3-305, Kesklinna linnaosa, Tallinn, Harju maakond, 10151, Estonia
Company registration number: 16373987
Email: hello@kibiva.energy

Throughout this policy, "we", "us" and "our" refer to ImpactScope OÜ.

2. Scope of this policy

The Website is an informational ("brochure") website. It does not contain contact forms, account registration, newsletter sign-up or any other feature that asks you to submit personal information. As a result, we collect only the limited data described below, which is generated automatically when you browse the Website.

3. What personal data we collect

a) Analytics data. We use Google Analytics to understand how visitors use the Website (for example, which pages are viewed and for how long). This service uses cookies and similar technologies and may process information such as your IP address (in truncated/anonymised form where available), device and browser type, approximate location, referring website and on-site behaviour. Google Analytics cookies are only set where you have given consent via our cookie banner. See our Cookie Policy for details.

b) Server log data. Like most websites, our hosting infrastructure automatically records technical information in server logs, such as your IP address, the date and time of your request, the pages requested and your browser/user-agent. This data is used to keep the Website secure and operating reliably.

4. Legal bases for processing

We rely on the following legal bases under Article 6(1) GDPR:

• Consent (Art. 6(1)(a)) — for analytics cookies and the data collected through Google Analytics. You may withdraw consent at any time (see Section 9 and our Cookie Policy).
• Legitimate interests (Art. 6(1)(f)) — for maintaining server logs to ensure the security, integrity and availability of the Website. Our legitimate interest is protecting our infrastructure against misuse and technical faults.

5. How we use your data

We use the limited data described above to:

• measure and analyse Website traffic and usage trends so we can improve content and performance;
• operate, maintain and secure the Website; and
• detect, prevent and address technical issues or misuse.

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not sell your personal data.

6. Cookies and analytics

The Website uses cookies. Detailed information about the cookies we use, their purpose and duration, and how you can manage them is set out in our separate Cookie Policy.

7. Sharing your data and recipients

We do not sell or rent your personal data. We may share data with:

• Service providers (processors) who act on our behalf, including our website hosting provider and Google (as provider of Google Analytics). These parties process data only on our instructions and under appropriate data-processing agreements.
• Authorities or third parties where we are required to do so by law, or to establish, exercise or defend legal claims.

8. International data transfers

Some of our service providers, including Google, may process data on servers located outside the European Economic Area (EEA), such as in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework, to ensure your data receives an adequate level of protection.

9. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Analytics data is retained in accordance with the retention settings configured in Google Analytics (typically up to 14 months), after which it is deleted or aggregated.
• Server logs are retained for a limited period necessary for security and troubleshooting, after which they are deleted or anonymised.

10. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to our processing;
• data portability, where applicable; and
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at hello@kibiva.energy. We will respond within the timeframes required by law.

11. Right to lodge a complaint

If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate:

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39, 10134 Tallinn, Estonia
Website: www.aki.ee
Email: info@aki.ee

You may also contact the supervisory authority in your country of residence.

12. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Children's privacy

The Website is intended for a general and business audience and is not directed at children. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be reflected on this page, and where appropriate, brought to your attention.

15. Contact us

For any questions about this Privacy Policy or how we handle your personal data, contact:

ImpactScope OÜ
Jõe tn 3-305, Kesklinna linnaosa, Tallinn, Harju maakond, 10151, Estonia
Email: hello@kibiva.energy