Digisped

Privacy policy

Last updated 12.10.2026

This privacy policy explains how Topweb OÜ processes personal data on the website digisped.eu and in the freight forwarding software Digisped (app.digisped.eu).

1. Who we are

The controller is Topweb OÜ (registry code 11683692), Uusmaa tee 6-14, Peetri alevik, Rae vald, 75312, Estonia.

For data protection questions, write to [email protected]. We have not appointed a data protection officer, as we are not required to do so.

2. Website and application form

When you send an application, we process the following data: company name, registry code, country, contact person's name, e-mail, phone, number of users, message and page language.

We use this data to answer your application, set up a trial or demo and communicate with you about it. The legal basis is taking steps at your request before entering into a contract and our legitimate interest in answering a business enquiry (GDPR Article 6(1)(b) and (f)). The application is stored in our database and a notification about it is sent by e-mail to our mailbox.

To block bots, the form uses Cloudflare Turnstile. It processes technical data about your device and browser (e.g. IP address) to tell a person from a bot.

The website does not use advertising or analytics cookies. Only your chosen language is stored in your browser, so that the page opens in the same language next time.

If you write to [email protected], we process your message and contact details to reply to you.

3. Users of the software

A user account is created by the client company's administrator, or by us at the client company's request. We process the following data: name, e-mail, phone (if added), role and membership in the company, software language and other preferences, password (in encrypted form that we cannot see), two-factor authentication device data, sign-in and security logs (e.g. time and IP address) and change history (who changed data and when).

We use this data to provide the software, keep accounts and data secure and send service-related e-mails (invitations and password resets). The legal basis is the contract with the client company and our legitimate interest in providing a secure service (GDPR Article 6(1)(b) and (f)).

The software stores your sign-in session and selected company in your browser. These are necessary for the software to work. The software does not use advertising or analytics cookies.

To bill for the service, we process the client company's details and the name and e-mail of the invoice recipient. The legal basis is the contract and the Estonian Accounting Act (GDPR Article 6(1)(b) and (c)).

4. Client company data in the software

Data that a client company enters into the software, or that is created in the course of its work, belongs to the client company. Examples are partners and their contact persons, jobs, transport orders, invoices, payments, bank statements, sent e-mails, vehicle numbers, and photos and CMRs added through the driver link. The client company is the controller of this data and Topweb OÜ is the processor. We process this data only to provide the service and according to the client company's instructions.

If you are a partner, contact person or driver of a client company and want to ask about your data, please contact that company first. If you contact us, we will forward your question to the company.

Our staff cannot see client companies' jobs, invoices or partners in the software. As the server administrator, we do have technical access to the database. We use it only for maintenance and fixing errors, at the client company's request (e.g. to hand over its data) or when required by law.

A client company's e-mails (transport orders, invoices and reminders) are sent through the company's own e-mail server that it has configured in the software. If the company enables a connection to an accounting program (e.g. Merit Aktiva), invoices are sent to the company's own accounting account.

5. Service providers

We use the following service providers, who process data on our behalf and according to our instructions:

At the user's request, the software also queries public registers: the Estonian Business Register and the European Commission's VAT register VIES. Only the company name, registry code or VAT number is sent to them.

Some service providers are located outside the European Economic Area or are connected to it (United Kingdom, USA). In such cases, data is transferred on the basis of a European Commission adequacy decision or standard contractual clauses.

We do not sell personal data or use it for advertising.

6. Retention

7. Your rights

You have the right to access your data, have incorrect data corrected, request deletion of data or restriction of processing, object to processing based on legitimate interest and receive your data in a machine-readable format.

Send your request to [email protected]. We will reply within one month at the latest. In the software, you can also change your name, phone and software language yourself (My profile).

If you believe that we are violating your rights, you can file a complaint with the Estonian Data Protection Inspectorate (www.aki.ee) or the data protection authority of your country of residence.

8. Security

Data is transferred over an encrypted connection (HTTPS). Each company sees only its own data in the software. Passwords are stored in encrypted form and users can enable two-factor authentication. Only those who need access for their work have access to the data.

9. Changes

We may change this policy if the service or the law changes. The current version is always on this page, and we will notify users of the software of important changes. This policy is written in Estonian. If a translation differs from the Estonian text, the Estonian text prevails.