Who handles your information

HeBA Clinic OÜ, registry code 14644401, operates the HeBA Digital business website. For questions about your information, contact ain.aaviksoo@heba.ee.

Information you choose to send

The contact form collects your email and the message you write. It also includes the page and any campaign label through which you reached the website, if present. We use these details to respond to your enquiry and understand what prompted it. Please do not submit patient information or sensitive personal data.

How the form works

Your message is sent to Ain Aaviksoo at ain.aaviksoo@heba.ee through our web hosting service. It is handled by the people dealing with your enquiry and the hosting and email services used to deliver it. The website does not add you to a mailing list. Information is kept for handling the enquiry and any resulting business relationship, subject to applicable retention obligations.

Receiving the Zild overview

The overview is available to download without registration. If you request it by email, we use your email and language choice to send the appropriate PDF link from Ain Aaviksoo’s address. You enter your address twice to reduce typing errors; this does not verify access to the mailbox. The duplicate entry is used only for comparison and is not included in the email. Requests do not subscribe you to a newsletter. The website does not keep a separate contact database. Delivery and mailbox logs may record the recipient and sending result.

Legal basis and your rights

We handle business enquiries and requested material delivery on the basis of our legitimate interest in responding to people who contact us, or to take steps at your request before entering a contract where applicable. You can ask to access or correct your data, object to processing, or request erasure or restriction where applicable. Contact ain.aaviksoo@heba.ee. You may also complain to the Estonian Data Protection Inspectorate (aki.ee).

Browser storage and technical data

The site remembers your chosen language in local storage. The forms use a temporary session cookie for security. To limit abuse, the server temporarily keeps a hashed IP-based rate-limit record without the contents of your message. Hosting services may keep technical access and delivery logs. This version does not include advertising or analytics trackers and uses system fonts without external font requests.

Version: 13 September 2026. This notice covers website enquiries, not clinical care or patient-platform data.