Last updated: 26 October 2026.
Who is responsible for this website?
ActivityStock (activitystock.com) is operated by Discover Estonia OÜ, the controller for the personal data described here.
Discover Estonia OÜ · Registry code: 12125505 · VAT number: EE101740609
Registered address: Pirni tn 4-8, Haabersti linnaosa, Tallinn, Harju maakond, 10614, Estonia.
Privacy enquiries: [email protected].
Browsing the website
Our hosting, delivery and security services process technical information needed to serve pages and protect the site. This can include your IP address, browser and device information, requested pages, request times and security events. We use this information for website delivery, troubleshooting and protection against misuse, based on our legitimate interests in operating a reliable and secure website.
Contacting us
If you email us, we receive your email address, the content of your message and any information you choose to include. We use it to answer your enquiry and maintain relevant correspondence. Our basis is our legitimate interest in responding to visitors, or taking steps at your request before a contract where applicable. Please do not send sensitive documents or payment details.
Cookies and administration
WordPress uses cookies for authorised administrator logins and preferences. Technical cookies may also be used by delivery and security services where needed to provide their functions. Optional Google Analytics is controlled by the analytics choice described below. We do not use advertising pixels or a newsletter signup.
Optional Google Analytics and Viator link clicks
With your consent, we use Google Analytics 4, provided by Google, to understand visits, traffic sources, landing pages, engagement, country and device information, and clicks on links to Viator. Google Analytics remains off until you choose Accept analytics. Choosing Reject analytics does not prevent you from using this website. Advertising storage, advertising personalisation and Google signals are disabled in our website tag.
For a Viator click, our custom event records the page path, the experience title, destination, provider and CTA location (top, middle, bottom or card). Google Analytics also supplies event time and session context. Our custom event omits URL query strings and does not send your name, email address or booking details. Booking and payment are handled separately by Viator.
Google Analytics may use first-party _ga and _ga_* cookies to distinguish visits and sessions, typically for up to two years. Our analytics choice is stored in your browser local storage under activitystock_analytics_v1 for up to 180 days. You can reopen Privacy choices at the bottom of any page and reject analytics to stop future collection; our site then attempts to clear its Google Analytics cookies. Withdrawing consent does not undo processing that already occurred.
The current Analytics property retains event-level data for 2 months and user-level data for 14 months; the user retention period can restart with new activity. Most standard aggregated reports are not governed by these retention settings. Google may process data outside the EEA; see the existing international-processing section and Google’s Privacy Policy . An optional browser add-on is available at Google’s Analytics opt-out browser add-on .
Cloudflare performance measurement
The site also loads Cloudflare performance beacon to measure page delivery and loading performance. This is separate from optional Google Analytics. Cloudflare describes its Web Analytics service as cookie-free and without tracking visitors across websites. See Cloudflare’s Web Analytics documentation and the Cloudflare privacy policy already linked in this notice.
Service providers and data sharing
The site uses SiteGround for hosting and Cloudflare for website delivery and security. Email correspondence is handled through our email provider, Google. These providers may process technical or correspondence data to supply their services. Access may also be available to authorised people who maintain the website. We do not sell visitor contact details.
Service-provider information: Cloudflare privacy policy and SiteGround privacy policy.
International processing
Our providers may process data outside the European Economic Area. Where a transfer requires a safeguard, it must be supported by an applicable adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses. Contact us for information about the arrangements relevant to your data.
Affiliate links and external websites
Following a booking or other external link takes you to a separate website. Affiliate links may contain referral identifiers so the platform can attribute qualifying bookings. That platform’s privacy and cookie policies govern its own processing. ActivityStock does not collect payment card details or operate the tour-booking checkout. Read our Affiliate Disclosure.
How long information is kept
We keep enquiry correspondence while needed to answer the question, follow up and maintain a relevant record. Technical records and backups are retained according to operational and security needs and the configured provider retention cycles. Information may be kept longer where needed for legal obligations or the establishment, exercise or defence of claims. We review retention against those purposes rather than retaining information indefinitely.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it. Contact us using the address above; we may need proportionate information to verify your identity.
You may also complain to the Estonian Data Protection Inspectorate or another competent supervisory authority. Further information about data protection rights is available from the European Commission.
Changes to this notice
We update this page when the website’s features or data practices change. The date at the top identifies the latest revision.