Privacy Policy
1. GENERAL PROVISIONS
1.1. In this Privacy Notice, Energiasalv Pakri OÜ, the personal data controller (hereinafter the “Company”), provides basic information about the processing of personal data by the Company—where the Company obtains your data and to whom the Company may provide it, for what purposes and on what grounds the Company processes it, what rights you have, how you can exercise them, and other relevant information.
1.2. For this Privacy Notice,” you” or the “data subject” shall mean the customer or another natural person whose personal data is processed by the Company.
1.3. The Company is responsible for protecting your data and is the controller of this data, determining the purposes and means of processing your information. The Company’s contact details as the data controller are in section 5 of this Privacy Notice.
2. DATA COLLECTION AND STORAGE
2.1. The Company may collect, process, and store personal data for the following reasons:
- When you have given a Company consent to the processing of your data for one or more specific purposes;
- Processing is necessary for the performance of a contract to which you are the party;
- The Company carries out internal and external communications to publicise the Company’s activities;
- processing is necessary for compliance with a legal obligation to which the Company is subject;
2.2. The company may process personal data you deliver or acquire from third parties.
2.3. By sharing their data, the data subject grants the Company the right to collect, arrange, use, and administer, for the purpose defined in the Privacy Notice, the personal data that the data subject shares with the Company either directly or indirectly.
3. DATA PROCESSING
3.1. The Company may process the following personal data of the data subject:
- Given name and surname, date of birth, etc.
- Contact data – E-mail address, phone number, etc.
- Professional data – qualifications, professional capacities, etc.
- Cookies’ data – as defined in the Cookies Policy, is available on the Company’s website.
- Other data which the Company may process on a lawful basis.
3.2. Processing of personal data following the purpose of the processing:
- Purpose of processing: security and safety. Maximum period of retention of personal data: following the time limits specified by law.
- The data processor can share customers’ data with third parties, such as authorised data processors.
3.3. When processing and storing the data subject’s data, the Company shall implement organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.
3.4. The data processor shall keep the data subjects’ data for a reasonable period allowed by applicable legislation and necessary for the processing.
4. TRANSFER OF PERSONAL DATA
4.1. The Company may transfer personal data to our partners, service providers, as well as to the entities listed below, only to the extent necessary to achieve the purposes of data processing and as permitted by the applicable law:
- for banks carrying out settlement operations;
- courts, regulators, law enforcement and other public authorities;
- companies providing data centre, hosting, cloud, website administration, and related services; companies creating, supporting, and developing software; and companies providing IT infrastructure and connectivity services.
4.2. When the Company transfers personal data to other third parties as data processors used by the Company, it ensures that they have appropriate technical and organisational measures to ensure the secure processing of personal data and adequate data protection following applicable European Union law.
4.3. The Company does not transfer your data to third countries (outside the EEA). If it is necessary to transfer your data outside the EEA for the purposes set out in this Privacy Notice, the Company will comply with the requirements of the GDPR.
5. YOUR RIGHTS
5.1. The data subject has the right to gain access to and examine their data.
5.2. The data subject has the right to obtain information on processing their data.
5.3. The data subject can modify or rectify inaccurate data.
5.4. If the Company processes the personal data of the data subject based on the consent granted by the latter, the data subject has the right to withdraw their consent at any time.
5.5. To exercise their rights, the data subject can contact Energiasalv Pakri OÜ at info@zeroterrain.com
5.6. The data subject can file a complaint with the Data Protection Inspectorate to protect their rights.
6. FINAL PROVISIONS
6.1. These data protection terms and conditions have been prepared in compliance with applicable legislation of the Republic of Estonia and the European Union.
6.2. The Company has the right to amend the data protection terms and conditions in part or whole, notifying the data subjects of the amendments via zeroterrain.com
