Privacy policy

1. General
1.1. Rantelon has assumed the obligation to protect privacy of their customers and users (hereinafter: „Users“). Therefore, we have prepared these Privacy Policy principles, which govern the collection, use, disclosure, transmission and storage of Users’ data (personal data). Our operations on the Internet comply with all relevant practices, as well as respective EU legislation and laws of the Republic of Estonia.
1.2. Rantelon OÜ is responsible controller of personal data (hereinafter: „controller of personal data“).
1.3. Data subject means an identified or identifiable natural person, whose personal data is processed.
1.4. Personal data means any information relating to an identified or identifiable natural person (data subject).
1.5. Processing of personal data shall mean any operation which is performed on personal data (such as amending, viewing, deleting).
1.6. By using Rantelon site www.rantelon.ee (hereinafter: „Site“), you agree to the use of cookies and processing of personal data in accordance with this policy.

2. Personal data processing principles of Rantelon
2.1. Rantelon processes your personal data pursuant to the principles set out in this privacy policy.
2.2. By sharing his/her personal data, the data subject gives the data processor the right to collect, use, or otherwise process his or her personal data.
2.3. Rantelon processes your personal data in a fair and transparent manner, and only if we are permitted to process your personal data by legislation.
2.4. Rantelon collects your personal data for specified, explicit and legitimate purposes. We do not process your personal data in a way incompatible with these purposes. If your personal data is processed for a purpose other than the initial purpose of processing personal data, we shall rely on the legal basis arising from law or we will ask for your prior consent to process your personal data for a purpose other than the initial purpose of processing personal data.
2.5. We do not collect excessive data or data that is unnecessary for Rantelon.
2.6. The data subject is responsible for ensuring that the data provided by him or her is accurate, correct and complete. Knowingly submitting false information is considered a violation of this Privacy Policy. If the personal data is inaccurate, Rantelon will allow you to rectify and/or delete the data. We do not correct and cannot allow the deletion of such personal data which we are committed to maintaining unchanged for compliance with a legal obligation (e.g. for the fulfilment of requirements arising from the Accounting Act).
2.7. Rantelon will keep your personal data in a form which permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed and for compliance with legal requirements. Rantelon processes personal data for no longer than it is required with binding contracts, orders or other binding legal obligations.
2.8. Rantelon processes your personal data in a manner that ensures appropriate security and makes every reasonable effort to avoid accidental loss, destruction, damage or unauthorized access of data.

3. Purposes, categories and legal bases for the processing of personal data and storage of personal data in Rantelon
3.1. Rantelon processes all personal data, which during the communication with the data subject, have become known and have been disclosed to Rantelon. Rantelon only processes and stores the personal data within a determined period of time and after that the data will be deleted or destroyed. The personnel of Rantelon only has the right to process the personal data to the extent that is necessary for the performance of the assigned tasks and that are required for the achievement of the purpose of processing the personal data. Rantelon processes the personal data for the compliance of legal obligations arising from legislation, for the performance of the concluded contracts and fulfilling customer orders and activities related to this (e.g. preparing the conclusion of a contract, delivery of goods). Rantelon may disclose information about users necessary for the fulfillment of orders and contracts and the provision of the services to selected contract partners responsible for the delivery of goods, transport, maintenance of the website, and the provision of marketing services.
3.2. Rantelon uses cookies on its site www.rantelon.ee, which enable one to improve the performance of the website and thereby provide a better browsing experience of the site. We also use cookies to monitor the user statistics of the website and the operations made on the site, however we do not follow the navigation of each customer on the website. The information obtained is used to improve user convenience and content of the site. Cookies, including third-party cookies (Google Analytics), are used to remember customer preferences and to collect information about Site traffic. If you wish, you can delete or block cookies, but doing so some features of the website may not work.
3.3. Rantelon’s website www.rantelon.ee collects statistics on Site browsing. Visiting websites, non-personalized technical data about the visitor is collected. The technical data is limited to the Internet address (IP address) of the computer or computer network used, the software version of the computer’s web browser and operating system, the time (time, date, year) and place of the visit. IP addresses are not associated with personally identifiable information. We use the automated tool Google Analytics to collect the above data. If you do not wish to provide this information about yourself, you can opt out of the collection of your data by Google Analytics at any time. See more information https://support.google.com/analytics/answer/9019185?hl=en
3.4. We also process personal data, if the data subject applies for a job at Rantelon. Rantelon does not store the documents related to the application for more than one year as of the competition for the post. During this period of time after the end of the recruitment process the personal data is stored with perspective to make a further employment offer.
3.5. Rantelon collects and processes only such personal data, the need for which we have clearly defined for ourselves in advance.

4. Data subject’s rights
4.1. Right of information about the extent and use of personal data. You have the right to access your personal data and get further information about what Rantelon processes concerning you. You may also contact Rantelon info@rantelon.ee, if you have further questions for us.
4.2. The right to rectification. All data subjects, who notice that their personal data are not up-to-date, are inaccurate or need rectification or supplementing, may turn to Rantelon for the rectification or correction of the data.
4.3. The right to data portability. A request for the transfer of personal data submitted by e-mail info@rantelon.ee will be answered within a month at the latest. Rantelon identifies and notifies about the personal data to be transferred.
4.4. The right to erasure (right to be forgotten). The data subject has a right to demand the erasure of personal data concerning him or her, if the personal data are no longer necessary or suitable in relation to the purposes of their collection or processing. Sometimes, we have a legal obligation to store the data and, in this case, we might not be able to satisfy your request. The same may apply, if we may store the respective data for the establishment, exercise or defence of legal claims.
4.5. Right to withdraw consent. Where the processing of personal data is based on the data subject’s consent, you have the right to withdraw your consent by notifying Rantelon by e-mail info@rantelon.ee. The withdrawal of consent is without retro-active effect and shall not affect the lawfulness of the completed processing of personal data when the consent was valid.
4.6. Right to lodge a complaint with a supervisory authority. All data subjects have a right to lodge a complaint with a national data protection supervisory authority, if the data subject finds that the processing of his or her personal data does not correspond to the provisions of data protection laws and general data protection rules. In Estonia, the national supervisory authority is the Estonian Data Protection Inspectorate.

5. Implementing provision
Rantelon shall retain the right to make changes to this privacy policy. Accordingly, this privacy policy shall be regularly reviewed and, if necessary, possible amendments will be made to it.

Approved 28.04.2021