Privacy Policy

1.1. OÜ Süsivesik

The data controller for personal data collected on the Saadi Academy website is OÜ Süsivesik.

• Registry code: 17086738
• VAT no.: EE102937644
• Address: Lüüsi 4-30, Tallinn
• Email: kursused@synage.ee
• Website: saadiacademy.ee · Brand: Saadi Academy
• Content author: Dr Sergey Saadi

Saadi Academy is an educational platform. We do not provide healthcare services, personal medical advice, diagnosis or treatment. Please do not send us your health data (diagnoses, test results, medical history) via the contact form, email or comments – we do not intend to and do not knowingly collect or process special-category health data.

The medical clinic operating at synage.ee is a separate company with its own privacy policy; Saadi Academy is not responsible for its content or data processing.

2.1. Purpose of the website

The website offers online courses, webinar recordings, PDF guides, Dr Saadi Klubi membership, free articles and educational materials, and a newsletter. Content is educational and informational and does not replace personal medical advice.

2.2. Use of the website

It is prohibited to interfere with the operation of the website, damage its security, violate the rights of third parties, submit false information or share access credentials with unauthorised persons.

2.3. Intellectual property

The website content (texts, videos, learning materials, designs, photos and logos) belongs to OÜ Süsivesik or is used lawfully. Copying, distribution, reworking and publishing without permission is prohibited.

2.4. Links to third-party environments

OÜ Süsivesik is not responsible for the content or security of third-party websites, except to the extent that they are used as authorised processors.

3.1. Definitions

Personal data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on personal data: collection, recording, organization, storage, use, transmission, deletion and destruction.

3.2. General processing principles

• data is processed lawfully, fairly and transparently;
• data is collected for specified and legitimate purposes;
• only the minimum necessary data is collected;
• data is kept as accurate and up-to-date as possible;
• data is stored only as long as necessary or required by law;
• data is protected with appropriate technical and organizational measures.

3.3. Data subject rights (GDPR)

• to be informed about the processing of your personal data;
• to request access, rectification or erasure;
• to request restriction of processing or to object;
• to withdraw consent if processing is based on consent;
• to receive data in a machine-readable format (data portability);
• to lodge a complaint with the Estonian Data Protection Inspectorate: info@aki.ee · aki.ee.

3.4. Data security

Measures applied: access right restrictions, authentication, confidentiality obligations, secure communication channels, data backup, and system and log monitoring.

4.1. Account and purchase data

Name, email address, account login data, purchase and membership history, billing data.

4.2. Courses, webinars and interest registration

Courses are currently sold on an interest-registration (waiting list) basis: we collect name and email to notify you when a product opens. Webinar registration and ticket sales happen on the third-party platform Fienta, which processes the related data as an independent controller.

4.3. Newsletter

Signing up for the newsletter collects your email address and, where relevant, topics of interest. We use MailerLite to send the newsletter.

4.4. Technical data and cookies

IP address, browser information, device information, logs and cookies – see section 8 for details.

4.5. What we do not collect

We do not request or knowingly collect health data, diagnoses, test results or other special-category personal data (GDPR Art. 9). If a user voluntarily sends such information (e.g. in a comment or email), we delete it as soon as possible and do not use it to personalise content.

• Managing purchases and membership – performance of a contract (GDPR Art. 6(1)(b)): creating an account, granting access to digital content, customer support.
• Invoicing and accounting – legal obligation (GDPR Art. 6(1)(c)) under the Estonian Accounting Act.
• Marketing and newsletter – only on the basis of consent (GDPR Art. 6(1)(a)).
• Cookies and analytics – on the basis of consent, except essential cookies.
• Website security and fraud prevention – legitimate interest (GDPR Art. 6(1)(f)).
• Preparing and defending legal claims.

OÜ Süsivesik uses the payment provider Montonio to process purchases. Montonio receives only the order number, amount and a neutral description such as "Saadi Academy order #[order number]" – the product name, learning topic or other substantive information is not sent to Montonio.

For some products, Montonio may offer an instalment (financing) option. In that case the credit agreement is concluded between the buyer and the credit provider selected via Montonio; OÜ Süsivesik is not a lender or credit intermediary and does not intermediate consumer credit. The lender's name and credit terms (including APR) are not stated in this document – they are shown on Montonio's platform before the agreement is concluded.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and compliance with accounting obligations (GDPR Art. 6(1)(c)).

OÜ Süsivesik does not sell personal data to third parties. Data may be shared, to the extent necessary, with the following service providers:

• Lovable Cloud – website, account and database hosting;
• Montonio – payment and instalment processing;
• Stripe (Stripe Payments Europe Ltd, Ireland) – recurring Dr Saadi Club membership payments (card, SEPA);
• ManyChat (ManyChat Inc, USA) – automated replies in Facebook/Instagram messages when you ask for a free material;
• Tally (Tally BV, Belgium) – web forms (e.g. questions and feedback);
• Zapier (Zapier Inc, USA) – passing data between services (e.g. adding a club member to a MailerLite group after a Stripe payment);
• Fienta – webinar registration and ticket sales;
• MailerLite – newsletter delivery;
• Bunny Stream – hosting and playback of course and webinar videos;
• an email delivery provider for order confirmations and notifications;
• Google Tag Manager (including Google Analytics and, where used, the Meta Pixel) – only if the user has given cookie consent;
• our accounting service provider and legal advisors.

International transfers: Some providers (Stripe, ManyChat, Zapier, MailerLite, Google, Meta) also process data in the United States (USA). Transfers to the USA are based on the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (GDPR Art. 45 and 46). Tally processes data in the EU.

Newsletters, offers and notifications are sent only on the basis of consent. You can withdraw consent at any time via the unsubscribe link in emails or by writing to kursused@synage.ee.

The website uses four categories of cookies:

• essential – basic site operation, login, session, language selection, CSRF protection and storing your cookie consent. No consent required.
• analytics – pseudonymous usage statistics (Google Analytics).
• marketing – advertising pixels and campaign performance measurement (e.g. Meta, Google Ads). Loaded only with consent.
• third-party cookies and embeds – Bunny Stream (video). Montonio and Fienta open on separate websites and do not load scripts on saadiacademy.ee.

Non-essential cookies are used only with your consent. Consent can be changed or withdrawn as easily as it was given – via the footer link "Cookie settings" or the button below.

Concrete list

The website is intended for adults. We do not knowingly collect personal data from minors. If we discover that we have collected a minor's data without the consent of a legal representative, we delete it as soon as possible.

Estonian law applies to this document. Disputes are first resolved through negotiation. Consumers may contact the consumer disputes committee of the Consumer Protection and Technical Regulatory Authority (TTJA) or the EU Online Dispute Resolution (ODR) platform. Complaints regarding personal data processing may be submitted to the Estonian Data Protection Inspectorate (aki.ee, info@aki.ee).

OÜ Süsivesik may amend this privacy policy. The updated version is published on the website and takes effect upon publication unless a later effective date is stated in the document.