Privacy Policy

3. COLLECTION AND PROCESSING OF PERSONAL DATA

3.1. In general, SBD collects visitors personal data during the period of cooperation. SBD can also collect personal data about You from the public SBD will only collect personal data to the extent reasonably necessary for the purposes for which the data is processed.
3.2. In certain cases, SBD may ask Your consent for the processing of Your personal In this case, You will be explained each time before the start of the processing operations, for what purpose the consent is asked and what personal data SBD intends to process. You have the right to withdraw this consent at any time. The withdrawal of consent does not have a retroactive effect and it is limited to the further processing of personal data. In another legal cases (e.g. the law and legitimate interest), SBD may have a legal basis for continuing to process Your personal data, regardless of the withdrawal of consent.
3.3. If You contact SBD, we will process data about You depending on the purpose of the request. The personal data we process about You depends on a specific contractual or pre-contractual relationship between You and SBD. The personal data we process about You may include the following:
        3.3.1. first and last name;
        3.3.2. identity document data;
        3.3.3. contact details (address, e-mail address, phone number);
      3.3.4. other information related to the contract (time of conclusion of the contract, price, payment information, current account number or other information provided in the contract);
       3.3.5. professional e-mail correspondence;
       3.3.6. camera recordings of You;
       3.3.7. the time and purpose of the visit.
3.4. SBD has the right to verify the accuracy of the personal data disclosed by You.

4. PURPOSES OF PROCESSING PERSONAL DATA

4.1. SBD processes personal data necessary to provide the service and fulfill contractual obligations as well as for the performance of SBD statutory obligations or for SBD legitimate interest (legal basis).
4.2. SBD processes the personal data of its visitors for the following purposes:
       4.2.1. identification of the person for the purpose of performing and ensuring the contract;
       4.2.2. communication for the purpose of performing and ensuring the contract;
       4.2.3. responding to inquiries and requests;
       4.2.4. organization of work;
       4.2.5. other processing based on the legitimate interest of SBD, provided that the legitimate interest of SBD does not outweigh the rights of the data subject (e.g. for the purpose of protecting the assets of SBD).
4.3. SBD has described all its activities in which the processing of personal data is carried out and the basis for the processing and will keep 06_I01_v2_Töötlustoimingute register up to date in the Document library.

 

5.  RETENTION OF PERSONAL DATA

5.1. SBD will only retain Your personal data in a form that allows You to be identified for as long as is reasonably necessary for the purposes for which the personal data was collected, justified by SBD legitimate interest, provided that SBD legitimate interest and any interference with the rights and freedoms of the data subject are balanced or that such obligation arises from law.
5.2. When retaining personal data, SBD complies with the following retention periods:
       5.2.1. The security camera recordings are retained for a maximum of 1 month, material necessary for the investigation of a specific case for up to 3 years, as of the occurrence of the incident;
      5.2.2. Data in digital form shall be retained in a dedicated program accessible only to limited personnel subject to user rights managed by the IT manager. The program is protected by a password that is not accessible to unauthorized
       5.2.3. Documents and copies in physical form (on paper) shall be retained for this purpose in separate lockable rooms or cabinets accessible only to authorized employees of SBD.
5.3. After the retention period has expired, the data will be destroyed/deleted. If You would like to receive more detailed information about which retention periods apply to the personal data stored about You, contact us at the contact details presented in the chapter 1.

 

6. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

6.1 SBD guarantees all rights under current legislation to the data subjects. During processing Your personal data, You have the following rights:
       6.1.1. right of access to data, which means that You have the right to ask at any time whether SBD has any personal data about You, and the right to be informed about what personal data SBD processes about You and for what purposes and on what legal grounds;
       6.1.2. the right to rectification of personal data, which means that You have the right to request SBD to clarify or correct Your personal data if it is insufficient, incomplete or incorrect;
       6.1.3. the right to object, which means that You have the right to object to the processing of Your personal data by SBD;
      6.1.4. the right to request the deletion of personal data, which means that You have the right to request SBD to delete Your personal data, for example, if the personal data is processed with Your consent and You have withdrawn Your consent;
      6.1.5. the right to restrict processing, which means that You have the right to demand that SBD restricts the processing of Your personal data, for example if SBD no longer needs Your personal data for processing purposes or if You have objected to the processing;
      6.1.6. the right to data portability, which means that You have the right to receive data that You have provided to SBD electronically in writing or in a commonly used electronic format and, if technically possible, to require SBD to transfer this data to a third party service provider (this right applies only to personal data processed in an automated manner for the purpose of fulfilling a contract concluded on the basis of consent and with the participation of an person).
6.2. In order to exercise the aforementioned rights, You must submit an application at the contact details provided in the chapter 1. SBD shall respond to the request in the form requested by the data subject (written, reproducible form) no later than 1 month after receiving the request. In its reply, SBD sets out its decision and the reasons for it.
6.3. If You find that SBD is infringing Your rights when processing Your personal data, always contact SBD However, You always have the right to lodge a complaint with the Data Protection Inspectorate if You find that SBD is infringing Your rights when processing Your personal data. The contact details of the Data Protection Inspectorate are: address: Tatari 39, 10134 Tallinn; phone: +372 627 4135; e-mail: info@aki.ee.

7. OTHER PROVISIONS

7.1 The privacy policy is governed by the law in force in the Republic of Estonia.