Privacy Policy

1. Introduction

PWB Forensic OÜ ("we", "us", "our") is committed to protecting the personal data of all individuals who interact with our websites www.pwbforensic.com and www.pwbvirtualclass.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Estonian data protection law.

By using our websites or services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

PWB Forensic OÜ is a company registered in Estonia (registry code 16031600), providing specialist forensic and investigative services. Our activities include:

• Document control and verification
• Vehicle identification and forensic analysis
• Verification of documents of foreign seasonal workers
• Chemical detection on vehicles
• Training courses (online and in-person) for individuals, companies, and law enforcement agencies
• Sale of specialist forensic publications and books
• Consulting services

Our services are accessible through two online platforms:

• www.pwbforensic.com — corporate website providing information about our services, courses, and publications.
• www.pwbvirtualclass.com — e-learning and training management platform for online and in-person courses.

All service requests, quotations, and commercial agreements are initiated exclusively via email contact. This applies to all services and products offered, including forensic services, training courses, and the purchase of books and publications — even where prices are displayed on the website. No automated online payment system is in place; all arrangements are handled directly between the client and PWB Forensic OÜ.

3. Data We Collect

3.1 Contact Form (www.pwbforensic.com)

When you submit a request through our contact form — whether for information about our forensic services, course costs, or any other enquiry — we collect:

• First name and last name
• Email address
• Subject and content of your message
• Any other information you voluntarily provide in your message

3.2 Service and Training Requests (via email)

When you contact us by email to request a forensic service or training course, we may collect:

• First name, last name, and role
• Email address and phone number
• Company name, VAT number, and registered address (for corporate clients)
• Name of the authority and contact details (for law enforcement agencies)
• Details of the service or training requested
• Billing information for the purpose of issuing invoices

3.3 E-learning Platform (www.pwbvirtualclass.com)

Upon agreement of a training contract or purchase of an online course, we create a personal account on our platform. In this context we collect and process:

• First name and last name
• Email address
• Username and encrypted password for platform access
• Course participation and completion data
• Company or agency affiliation (where applicable)

Access credentials for in-person training participants are issued following the signing of a training contract between PWB Forensic OÜ and the client organisation (company or law enforcement agency).

3.4 Technical Data

When you visit our websites, we may automatically collect certain technical data, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Date and time of your visit

This data is collected through essential technical cookies only. We do not use Google Analytics or any third-party tracking or profiling tools.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a)): when you voluntarily submit a contact form or send us an email enquiry.
• Contract performance (Art. 6(1)(b)): when a service agreement or training contract is concluded, or when platform access credentials are issued.
• Legal obligation (Art. 6(1)(c)): to comply with applicable accounting, tax, and legal requirements under Estonian law.
• Legitimate interest (Art. 6(1)(f)): to ensure the security and proper functioning of our websites and to protect our services from misuse.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted via the contact form or by email
• To prepare and manage service and training agreements
• To provide and manage access to online courses on the e-learning platform
• To issue invoices and manage billing for services rendered
• To send administrative communications related to your account, courses, or ongoing services
• To ensure the security and technical functioning of our websites
• To comply with legal and regulatory obligations

We do not use your data for automated decision-making or profiling.

6. Data Retention

We retain your personal data for the following periods:

• Contact form and email enquiry data: up to 12 months from the date of your request, unless a contractual relationship is established.
• Account and course data (e-learning platform): for the duration of the account and up to 3 years after its termination, unless a longer retention period is required by law.
• Contract and billing data: 7 years as required by Estonian accounting law (Raamatupidamise seadus).
• Technical/log data: up to 12 months.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Hosting and infrastructure providers: who store data on servers located within the European Economic Area (EEA), subject to appropriate data processing agreements.
• Accounting and legal advisors: where necessary to fulfil our legal obligations, and strictly limited to what is necessary.
• Public authorities: where required by law or by a binding legal order issued by a competent authority.

All third parties with whom we share data are required to process it in accordance with the GDPR and to maintain appropriate security measures.

8. International Transfers

Your personal data is processed and stored within the European Economic Area (EEA). We do not transfer your data to countries outside the EEA. Should this change in the future, we will update this Policy and implement appropriate safeguards as required by Chapter V of the GDPR.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): to request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): to request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): to request deletion of your data, where no legal obligation requires us to retain it.
• Right to restriction of processing (Art. 18): to request that we limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): to object to processing based on our legitimate interest.
• Right to withdraw consent (Art. 7(3)): to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at: privacy@pwbforensic.com

We will respond to your request within 30 days. In complex cases, this period may be extended by a further 60 days, of which we will notify you in advance.

10. Right to Lodge a Complaint

If you believe that we have processed your personal data in violation of applicable law, you have the right to lodge a complaint with the competent supervisory authority. In Estonia, this is:

You also have the right to lodge a complaint with the supervisory authority of your country of residence or place of work within the EU/EEA.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Access to personal data is restricted to authorised personnel only. Passwords on the e-learning platform are stored in encrypted form. We review and update our security practices on a regular basis.

12. Children's Privacy

Our websites and services are not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe that a child has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will notify users of any significant changes by posting the updated Policy on our websites with a revised effective date. We encourage you to review this Policy periodically.

14. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

Last updated: February 2026