LASITA MAJA AS PRIVACY POLICY
INTRODUCTION
Lasita Maja AS is a legal entity, registry code 11496435, seat at Risu tee 2, Pihva küla, Tartu, Tartumaa, 61407, Republic of Estonia. Lasita Maja AS was founded in the city of Tartu in 1998 and has grown into a leading European manufacturer of log cabins.
We collect and use your personal data in our business activity to provide you with the best service, advice and solutions, and to fulfil our contracts with you.
We ensure protection of your data and privacy in accordance with all applicable legal requirements.
To ensure secure processing of such personal data, Lasita Maja AS has established processing procedures and administrative regulations, and has implemented other IT and physical data security measures.
The measures for secure processing of personal data have been implemented for all information systems and manual processes performed by individuals, including employees, suppliers, clients, service providers and other third parties that have access to any personal data processed by Lasita Maja AS.
The information in this Privacy Policy applies to personal data of natural persons, but not to the data of business undertakings or any other legal entities or institutions. The information is also applicable to personal data of any natural persons engaged in professional activities (e.g., employees of a company or an organisation). If you are communicating with us as a representative of a corporate client, we will record and use your personal data as well.
WHY DO WE COLLECT AND USE YOUR PERSONAL DATA?
We collect and use your personal data so we can provide you with the best advice and solutions, perform our contracts with you and fulfil any statutory obligations regarding the collection and storage of personal data.
It means that we will collect and use your personal data if:
• You have entered into, or are considering, a contract with us;
• You have given us your consent to use your personal data;
• We are legally bound to do so, e.g., based on any of the following laws:
− Law of Obligations Act;
− Taxation Act;
− Tax Information Exchange Act;
− Accounting Act,
− etc.;
• It is necessary for the purposes of the legitimate interests of Lasita Maja AS, incl. prevention of violation or damage, improving the security of IT systems or payments, or for direct marketing purposes. We will only do so if our respective interests clearly prevail over your opposing interest against the processing your personal data;
• If you are communicating with us as a representative of a corporate client, we may process your personal data for any of the following purposes, depending on the content and scope of our communication:
− Fulfilling our contractual obligations and providing services to clients;
− Complying with applicable legislation;
− Administrative purposes, incl. securing, supporting and maintaining our systems, platforms and other digital applications;
− Ensuring an adequate level of security in connection with visits to our premises;
− Implementing necessary controls for crime prevention.
WHAT KINDS OF PERSONAL DATA WE COLLECT AND USE?
In its regular business activities, Lasita Maja AS collects various kinds of personal data, including:
- Personal data of employees (current, past and future employees);
- Information on clients;
- Information on visitors of our website;
- Information on subscribers;
- Information on shareholders.
Special categories of personal data
In its business activities, Lasita Maja AS does not collect personal data on racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Lasita Maja AS only collects special categories of personal data if we need such data to provide you with advice regarding our services or to offer you a service. Before processing any special categories of personal data, we will ask you for an explicit consent, except where the law gives us the right to process special categories of personal data without your consent (e.g., for enforcement of our claims).
We can also collect other categories of personal data if this is necessary for providing you with specific services or complying with legal requirements.
Our ability to advise you and offer you the best solutions is largely dependent on how much we know about you. Therefore, it is important that you provide us with true and accurate information and keep us updated on any changes.
WHAT ARE THE PURPOSES OF COLLECTING AND USING YOUR PERSONAL DATA?
Lasita Maja AS processes personal data for the purpose of:
· Entering into contracts, providing services and fulfilling its obligations;
· Clarifying the conditions and circumstances of service provision and sale of goods;
· Making targeted offers to clients;
· Conducting client satisfaction surveys;
· Providing clients with convenience services and notifications (e.g., by organising campaigns);
· Fulfilling its legal obligations;
· Ensuring protection of its legitimate interests in accordance with the data protection rules established in the European Union (EU).
We also collect and use data in other functions related to the provision of services, incl. for the following purposes:
• Client administration, consultation and records management;
• Assessment of creditworthiness;
• Development and management of our services and operations;
• Services marketing;
• Identity verification and control;
• Debt collection;
• Protecting you and Lasita Maja AS from fraud;
• Responding to and satisfying any legal claims of third parties.
We collect data directly from you or by monitoring your activities, e.g., when you:
• Fill out any applications or other forms to receive services;
• Submit any documents to us on paper or via electronic correspondence;
• Call us. We will notify you in case we record your phone call.
We will retain your data only for as long as necessary for the purpose for which we collected and used your data.
THIRD PARTIES AND YOUR PERSONAL DATA
Personal data received from third parties
We record and use personal data that we receive from third parties, for instance:
• From administrative registers, such as the Commercia Register, the Population Register or other public data sources or registers. We may collect and use such data, e.g., for verifying the accuracy of other data;
• From credit agencies and credit registers. We may collect and use the data for creditworthiness assessments. We update the data on a regular basis;
• From business partners of Lasita Maja AS, subject to their consent or for the purposes permitted by law.
Third parties that may receive your personal data from us
In some cases, we may disclose your personal data to third parties, provided that:
• You have authorised us to do so;
• It is required or permitted by law;
• You have given your prior consent;
• You fail to fulfil your obligations to Lasita Maja AS thereby entitling us to disclose your personal data to credit agencies and registers;
• It is required for development, operation and continued availability of IT systems.
When transferring your personal data, with your consent, to data processors established in third countries (i.e., outside the EU or the European Economic Area), we ensure the protection of your rights and security of your personal data at a level that meets the criteria approved by the European Commission.
PROFILING AND AUTOMATED DECISION-MAKING
Profiling
Lasita Maja AS does not carry out automated processing of your personal data for the purpose of evaluating certain personal aspects related to natural persons, in particular concerning performance at work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements of natural persons.
Automated decision-making
Lasita Maja AS does not carry out automated processing of your personal data for the purpose of taking decisions which may restrict your rights or freedoms.
YOUR RIGHTS
Right of access to your personal data
You can obtain access to the personal data that we have collected about you and use, including the sources of data and the purposes of use. You can receive information on the period for which your data will be stored and on the recipients and scope of any data disclosures. Your right to access your personal data may be restricted by applicable legislation, the privacy rights of other persons, or our business needs. Our know-how, business secrets, internal evaluations and resources can also be part of the information that you cannot access.
Right to object
You have the right to object to the processing of your personal data, incl. when we rely on our legitimate interests in the processing of data.
You can also prohibit the use of your personal data for direct marketing purposes.
Rectification or erasure of data
If your data are inaccurate, incomplete or irrelevant, you have the right to demand rectification or erasure of the data, subject to any applicable legislative restrictions and data processing rights.
Right to restriction of use
If you believe that the data we have collected about you are inaccurate or you have objected to the use of data, you have the right to demand that the use of such data be restricted to storage only. The use can be restricted to storage only until the accuracy of the data can be verified or until we can weigh our legitimate interests against your interests.
If you have the right to demand erasure of data, you can instead demand that the use of data by us be restricted to storage only. If we need your personal data only for enforcing or protecting legal claims, then you can prohibit the use of the data for any purpose other than storage. However, we may have the right to use the data for other purposes if it is required to enforce claims or if you have consented to such use.
Withdrawal of consent
If the use of data is subject to your consent, you can withdraw your consent at any time. Please note that after you withdraw your consent we may not be able to provide you with certain services. We can also continue using your personal data for purposes such as fulfilling a contract with you or complying with legal requirements.
Data portability
If our use of data is based on your consent or an agreement, and data processing is automated, you have the right to receive an electronic machine-readable copy of the data you have submitted.
The timing of the exercise of your rights in an aggregate table:
|
Rights |
Time of exercise |
|
Right to consent to data processing |
You are asked to provide consent at the time of data collection (if collected directly from you) or within one month (if collected from a third party) |
|
Right to withdraw the consent to data processing |
Immediately, without unreasonably delay |
|
Right of access to data |
Within one month from application |
|
Right to rectification of data |
Within one month from application |
|
Right to erasure (‘to be forgotten’) |
Immediately, without unreasonably delay |
|
Right to restrict processing |
Immediately, without unreasonably delay |
|
Right to data portability |
According to submitted application |
|
Right to object |
Proceedings are initiated when an objection is received |
|
Rights concerning automated processing of data or profiling |
According to submitted application |
COOKIES
The websites of Lasita Maja AS use cookies. Cookies are small text files that are stored on your device when you visit any of our websites.
By continuing to use our website, you are agreeing to our use of cookies as specified in this policy.
If you do not agree to the use of cookies, you can set up your browser to reject cookies. However, in this case we cannot guarantee proper functioning of all features of our website in your browser. You can find more information on managing and refusing cookies by visiting http://www.allaboutcookies.org/.
Cookies help us improve the quality of our services. We use cookies to collect statistics, to remember the preferences of site visitors and to provide advertising.
As you visit the websites of Lasita Maja AS, our analytics and advertising partners (Google Analytics, Facebook, YouTube, etc.) may also be able to save their cookies in your device.
SECURITY OF PERSONAL DATA PROCESSING
Lasita Maja AS retains personal data only for as long as they are required. All personal data with an expired retention term will be destroyed using the best available practices.
Lasita Maja AS ensures protection and appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Access to personal data is only granted to authorised processors and only to the extent necessary for achieving the objectives arising from legitimate interests.
Lasita Maja AS declares that it complies with the applicable EU requirements on the protection of personal data. Lasita Maja AS will make every effort to protect your personal data. We only process personal data for specific and lawful purposes and only to the extent necessary. We expect our cooperation partners to share the same values as they follow our rules for personal data processing.
In case of any incident connected to personal data, Lasita Maja AS will take all appropriate measures to mitigate possible consequences and reduce similar risks in the future.
TERMS OF NOTIFICATION
Notifications are offers sent to subscribers via communication channels if, in the opinion of Lasita Maja AS, they can be of interest to particular subscribes.
You can opt out of notifications at any time. To unsubscribe from our newsletter, please click the link at the end of the letter. To unsubscribe from other notifications, please contact: andmekaitse@lasita.com
By subscribing to our newsletter, you consent to the storage and processing of your personal data according to our policy. Your personal data will not be shared with third parties.
Lasita Maja AS processes your personal data in accordance with the EU data protection rules and other privacy legislation.
If you have any questions, please contact: andmekaitse@lasita.com
CONTACT DETAILS AND FILING OF COMPLAINTS
If you have any questions concerning your rights with regard to the processing of your personal data or concerning the collection and use of personal data by us, or if you are not satisfied with the way we process your personal data, please contact us at:
AS Lasita Maja
Address: Risu tee 2, Pihva küla, Tartu, Tartumaa, 61407, Republic of Estonia
Telephone: +372 7337640, fax +372 7337650
Email: andmekaitse@lasita.com
If you are not satisfied with the response of Lasita Maja AS to your application concerning your privacy, you can file a respective challenge with Lasita Maja AS or lodge a complaint with the following supervisory authority:
Data Protection Inspectorate
Väike-Ameerika 19, 10129 Tallinn
Tel.: 6 274 135, fax: 6 274 137
Email: info@aki.ee
Website: www.aki.ee