PROFDIAGNOSTIK OÜ – Privacy Policy and Terms of Use for the Website www.tehnoulevaatus.ee

PROFDIAGNOSTIK OÜ – Privacy Policy and Terms of Use for the Website www.tehnoulevaatus.ee

1. DEFINITIONS

1.1. Data Subject
A Data Subject is a natural person about whom Profdiagnostik OÜ possesses information or information through which a natural person can be identified. Data Subjects include, for example, private customers and employees whose Personal Data is processed by Profdiagnostik OÜ.

1.2. Privacy Policy
This Privacy Policy is the present document that sets out the principles for the processing of Personal Data by Profdiagnostik OÜ.

1.3. Personal Data
Personal Data means any information relating to an identified or identifiable natural person.

1.4. Processing of Personal Data
Processing of Personal Data means any operation performed on Personal Data concerning a Data Subject. This includes, for example, collection, recording, organisation, storage, alteration, disclosure, access provision, querying, extraction, use, transfer, cross-use, combination, restriction, deletion or destruction of Personal Data, regardless of the manner or means by which such operations are carried out.

1.5. Customer
A Customer is any natural or legal person who uses or has expressed a wish to use the services of Profdiagnostik OÜ.

1.6. Website
The website www.tehnoulevaatus.ee is the official website of Profdiagnostik OÜ.

1.7. Visitor
A Visitor is any person who uses the website of Profdiagnostik OÜ.

1.8. Services
Services refer to all services and products offered by Profdiagnostik OÜ.

1.9. Cookies
Cookies are data files that may be stored on the Visitor’s device when using the Website.

1.10. Data Protection Officer
The Data Protection Officer of Profdiagnostik OÜ is the person responsible for ensuring compliance with the principles of Personal Data Processing within Profdiagnostik OÜ and whom the Data Subject may contact in case of complaints or questions.

1.11. Sales Channels
Sales Channels are the communication methods used by Profdiagnostik OÜ for interacting with Data Subjects and for providing services and products. These include e-mail, telephone, public and social media, various communication platforms, personalised and interactive advertisements, and similar tools on websites and elsewhere.

1.12. Product Portfolio
The Product Portfolio refers to the business units, products and services of Profdiagnostik OÜ, the list of which is available on the website www.tehnoulevaatus.ee. The terms used in this Privacy Policy, agreements, general terms and conditions, and communications between the parties shall have the meanings defined above.

2. GENERAL PROVISIONS

2.1. The controller of Personal Data is Profdiagnostik OÜ, registry code 10788514, located at Ehitajate tee 116, Tallinn 13517, Estonia.

2.2. This Privacy Policy applies to all Data Subjects. All employees and cooperation partners of Profdiagnostik OÜ who come into contact with Personal Data held by Profdiagnostik OÜ are required to comply with the rights and obligations described herein.

2.3. The Privacy Policy may be supplemented by privacy notices published on the Website or devices and may also be amended accordingly.

3. PRINCIPLES

3.1. Profdiagnostik OÜ always proceeds from the interests, rights and freedoms of the Data Subjects when processing Personal Data.

3.2. Profdiagnostik OÜ aims to ensure responsible processing of Personal Data in accordance with best practices and is always prepared to demonstrate compliance with the applicable processing requirements.

3.3. All processes, instructions, operations and activities related to the processing of Personal Data at Profdiagnostik OÜ are based on the following principles:

3.3.1. Lawfulness
Personal Data is processed only where there is a legal basis for doing so, such as consent.

3.3.2. Fairness
Processing of Personal Data is fair, ensuring that Data Subjects receive sufficient information regarding how their Personal Data is processed.

3.3.3. Transparency
Processing of Personal Data is transparent to the Data Subject.

3.3.4. Purpose Limitation
Personal Data is collected for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes.

3.3.5. Accuracy
Personal Data must be accurate and, where necessary, kept up to date. Reasonable measures are taken to ensure that inaccurate Personal Data is corrected or deleted without delay.

3.3.6. Storage Limitation
Personal Data is stored only for as long as necessary for the purposes for which it was collected. If Profdiagnostik OÜ wishes to retain Personal Data longer than necessary, the data will be anonymised so that the Data Subject can no longer be identified.

Data obtained through customer relationships or similar interactions is generally retained according to best practices and, where processed on the basis of consent, until consent is withdrawn.

3.3.7. Integrity and Confidentiality
Personal Data is processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage through appropriate technical and organisational measures. Profdiagnostik OÜ maintains internal guidelines, employee policies and contracts with processors to ensure best practices, continuous risk assessment and adequate technical and organisational safeguards.

4. TYPES OF PERSONAL DATA

4.1.Profdiagnostik OÜ may collect, among other things, the following categories of Personal Data:

4.1.1.
Personal Data disclosed by the Data Subject to Profdiagnostik OÜ, such as:

• e-mail address
• telephone number

5. PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA

5.1. Profdiagnostik OÜ processes Personal Data only on the basis of consent or applicable law.

5.2. Where processing is based on consent, Personal Data is processed strictly within the limits, scope and purposes defined by the Data Subject. Consent must be clearly distinguishable from other matters, easily accessible and presented in clear and simple language. Consent is given electronically and voluntarily, specifically, knowingly and unambiguously, for example by selecting a checkbox on the website.

5.3. Legitimate interest means the interest of Profdiagnostik OÜ in managing and operating its business in order to provide the best possible services on the market.

Processing based on legitimate interest may include:

• sending reminders to registered customers
• managing and analysing customer databases
• improving service availability and quality
• analysing website usage
• compiling statistics
• improving user experience

5.4. Personal Data may also be processed in order to comply with legal obligations, including accounting and payment processing requirements.

5.5. Where Personal Data is processed for a new purpose different from the original purpose, Profdiagnostik OÜ carefully evaluates whether such processing is lawful. 

6. DISCLOSURE AND TRANSFER OF PERSONAL DATA

6.1. Profdiagnostik OÜ cooperates with third parties to whom Personal Data may be transferred where necessary for cooperation purposes.

6.2. Such third parties may include:

• marketing partners
• customer satisfaction survey providers
• debt registers
• postal and e-mail service providers

provided that:

• the purpose and processing are lawful
• processing takes place under a valid agreement and according to Profdiagnostik OÜ instructions

7. SECURITY OF PERSONAL DATA PROCESSING

7.1. Profdiagnostik OÜ stores Personal Data for up to seven years or until consent is withdrawn where applicable. Personal Data whose retention period has expired is securely destroyed.

7.2. Profdiagnostik OÜ has established internal rules and procedures to ensure the security of Personal Data through organisational and technical measures.

7.3. In the event of a Personal Data incident, Profdiagnostik OÜ will take all necessary steps to mitigate consequences and reduce future risks. Incidents are documented and, where legally required, reported to the Estonian Data Protection Inspectorate and the affected Data Subject.

8. RIGHTS OF THE DATA SUBJECT

8.1. Rights related to consent

8.1.1. The Data Subject has the right at any time to withdraw consent for the processing of Personal Data.

8.1.2. Consent for reminders may be withdrawn through the unsubscribe link included in reminder messages.

8.2. Additional rights

The Data Subject also has the right:

• to receive information regarding Personal Data collected about them
• to request correction of inaccurate Personal Data
• to request deletion of Personal Data where no active future bookings exist
• to request restriction of processing
• to request an assessment from the supervisory authority regarding the lawfulness of processing

9. EXERCISING RIGHTS AND SUBMITTING COMPLAINTS

9.1. Questions, requests or complaints regarding Personal Data processing may be submitted by e-mail to: helgi@tehnoulevaatus.ee

9.2. The Data Subject also has the right to lodge a complaint with:

• Profdiagnostik OÜ
• the Estonian Data Protection Inspectorate
• a court of law

if the Data Subject believes that their rights have been violated. The Estonian Data Protection Inspectorate contact details are available at: Andmekaitse Inspektsioon

10. COOKIES AND OTHER WEB TECHNOLOGIES

10.1. Profdiagnostik OÜ may collect information about Visitors through cookies and similar technologies, including IP addresses, device information and location data.

10.2. Collected data is used to:

• ensure proper service functionality
• improve service quality
• personalise advertisements
• facilitate login and security
• analyse visitor behaviour and statistics

10.3. The Website uses:

• session cookies
• persistent cookies
• third-party cookies

Third-party cookies are controlled by the relevant third parties.

10.4. Most web browsers allow cookies by default. Disabling cookies may limit the functionality of the Website.

11. IMPORTANT DOCUMENTS AND INTERNAL PROCEDURES

The implementation of this Privacy Policy is supported by:

• risk analyses
• internal procedures
• incident response policies
• data processing guidelines
• processor agreements
• breach notification forms 

12. CONTACT DETAILS

For questions regarding Personal Data processing, contact: helgi@tehnoulevaatus.ee

13. OTHER CONDITIONS

Profdiagnostik OÜ reserves the right to amend these Privacy Policy terms unilaterally. Updated versions will be published on: www.tehnoulevaatus.ee