1.2. Rantelon OÜ is responsible controller of personal data (hereinafter: „controller of personal data“).
1.3. Data subject means an identified or identifiable natural person, whose personal data is processed.
1.4. Personal data means any information relating to an identified or identifiable natural person (data subject).
1.5. Processing of personal data shall mean any operation which is performed on personal data (such as amending, viewing, deleting).
2. Personal data processing principles of Rantelon
2.2. By sharing his/her personal data, the data subject gives the data processor the right to collect, use, or otherwise process his or her personal data.
2.3. Rantelon processes your personal data in a fair and transparent manner, and only if we are permitted to process your personal data by legislation.
2.4. Rantelon collects your personal data for specified, explicit and legitimate purposes. We do not process your personal data in a way incompatible with these purposes. If your personal data is processed for a purpose other than the initial purpose of processing personal data, we shall rely on the legal basis arising from law or we will ask for your prior consent to process your personal data for a purpose other than the initial purpose of processing personal data.
2.5. We do not collect excessive data or data that is unnecessary for Rantelon.
2.7. Rantelon will keep your personal data in a form which permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed and for compliance with legal requirements. Rantelon processes personal data for no longer than it is required with binding contracts, orders or other binding legal obligations.
2.8. Rantelon processes your personal data in a manner that ensures appropriate security and makes every reasonable effort to avoid accidental loss, destruction, damage or unauthorized access of data.
3. Purposes, categories and legal bases for the processing of personal data and storage of personal data in Rantelon
3.1. Rantelon processes all personal data, which during the communication with the data subject, have become known and have been disclosed to Rantelon. Rantelon only processes and stores the personal data within a determined period of time and after that the data will be deleted or destroyed. The personnel of Rantelon only has the right to process the personal data to the extent that is necessary for the performance of the assigned tasks and that are required for the achievement of the purpose of processing the personal data. Rantelon processes the personal data for the compliance of legal obligations arising from legislation, for the performance of the concluded contracts and fulfilling customer orders and activities related to this (e.g. preparing the conclusion of a contract, delivery of goods). Rantelon may disclose information about users necessary for the fulfillment of orders and contracts and the provision of the services to selected contract partners responsible for the delivery of goods, transport, maintenance of the website, and the provision of marketing services.
3.3. Rantelon’s website www.rantelon.ee collects statistics on Site browsing. Visiting websites, non-personalized technical data about the visitor is collected. The technical data is limited to the Internet address (IP address) of the computer or computer network used, the software version of the computer’s web browser and operating system, the time (time, date, year) and place of the visit. IP addresses are not associated with personally identifiable information. We use the automated tool Google Analytics to collect the above data. If you do not wish to provide this information about yourself, you can opt out of the collection of your data by Google Analytics at any time. See more information https://support.google.com/analytics/answer/9019185?hl=en
3.4. We also process personal data, if the data subject applies for a job at Rantelon. Rantelon does not store the documents related to the application for more than one year as of the competition for the post. During this period of time after the end of the recruitment process the personal data is stored with perspective to make a further employment offer.
3.5. Rantelon collects and processes only such personal data, the need for which we have clearly defined for ourselves in advance.
4. Data subject’s rights
4.1. Right of information about the extent and use of personal data. You have the right to access your personal data and get further information about what Rantelon processes concerning you. You may also contact Rantelon email@example.com, if you have further questions for us.
4.2. The right to rectification. All data subjects, who notice that their personal data are not up-to-date, are inaccurate or need rectification or supplementing, may turn to Rantelon for the rectification or correction of the data.
4.3. The right to data portability. A request for the transfer of personal data submitted by e-mail firstname.lastname@example.org will be answered within a month at the latest. Rantelon identifies and notifies about the personal data to be transferred.
4.4. The right to erasure (right to be forgotten). The data subject has a right to demand the erasure of personal data concerning him or her, if the personal data are no longer necessary or suitable in relation to the purposes of their collection or processing. Sometimes, we have a legal obligation to store the data and, in this case, we might not be able to satisfy your request. The same may apply, if we may store the respective data for the establishment, exercise or defence of legal claims.
4.5. Right to withdraw consent. Where the processing of personal data is based on the data subject’s consent, you have the right to withdraw your consent by notifying Rantelon by e-mail email@example.com. The withdrawal of consent is without retro-active effect and shall not affect the lawfulness of the completed processing of personal data when the consent was valid.
4.6. Right to lodge a complaint with a supervisory authority. All data subjects have a right to lodge a complaint with a national data protection supervisory authority, if the data subject finds that the processing of his or her personal data does not correspond to the provisions of data protection laws and general data protection rules. In Estonia, the national supervisory authority is the Estonian Data Protection Inspectorate.
5. Implementing provision