1. General provisions
1.1. Rantelon is committed to protecting the privacy of its customers and users (hereinafter the “User”). We have therefore prepared this privacy policy, which covers the collection, use, disclosure, transfer and storage of the User’s data (personal data). Our online activities comply with all applicable European Union and Estonian legislation.
1.2. The controller of personal data is Rantelon OÜ (hereinafter the “Data Controller”).
1.3. A data subject is an identified or identifiable natural person whose personal data is processed.
1.4. Personal data means any information relating to an identified or identifiable person (the data subject).
1.5. Processing of personal data means any operation performed on personal data, such as amendment, viewing or deletion.
1.6. This policy explains how Rantelon’s website, www.rantelon.ee (hereinafter the “Website”), processes personal data. Optional analytics cookies are used only with your consent. Continuing to browse does not constitute consent.
2. Rantelon’s principles for processing personal data
2.1. Rantelon processes your personal data in accordance with the principles set out in this privacy policy.
2.2. By sharing their personal data, the data subject authorises the Data Controller to collect, use or otherwise process that data.
2.3. Rantelon processes your personal data fairly and transparently, and only where we are permitted to do so by law.
2.4. Rantelon collects your personal data for specific, clearly defined and lawful purposes. We do not process your personal data in a way that is incompatible with the original purposes. If your personal data is processed for a purpose other than the original purpose, we rely on a legal basis provided by law or obtain your prior permission to process the data for that different purpose.
2.5. We do not collect excessive information or information that is unnecessary for Rantelon.
2.6. The data subject is responsible for ensuring that the information they provide is accurate, correct and complete. Knowingly providing false information is considered a breach of this privacy policy. If personal data is incorrect, Rantelon will give you the opportunity to have it corrected and/or deleted. We will not amend, and cannot guarantee the deletion of, personal data that we are required to retain unchanged to fulfil a legal obligation, for example to comply with the Accounting Act.
2.7. Rantelon retains your personal data in a form that allows data subjects to be identified only for as long as necessary to fulfil the purposes of processing and applicable legal requirements. Rantelon processes personal data only for as long as required under contracts, orders or other binding legal obligations.
2.8. Rantelon processes your personal data in a way that ensures appropriate security and makes every reasonable effort to prevent its loss, destruction, damage or unauthorised access.
3. Purposes, categories, legal bases and retention of personal data
3.1. Rantelon processes all personal data that it learns about or receives through communication with the data subject. Personal data is processed and retained by Rantelon only for a specified period, after which it is deleted or destroyed. Rantelon’s staff may process personal data only to the extent necessary to perform their assigned duties and achieve the purpose of the processing.
Rantelon processes personal data to fulfil legal obligations, orders and contracts, and for related activities, such as preparing to enter into a contract or delivering goods. Rantelon may disclose information about Users that is necessary to fulfil orders and contracts and provide services to selected contractual partners responsible for supplying goods, transport, website maintenance or marketing services.
3.2. Website storage and your choices. We store your cookie choice in your browser’s local storage under rantelon-cookie-consent-v1 for 180 days. This preference is necessary to remember your decision and is used whether you accept or reject analytics. If browser storage is unavailable, your choice applies only to the current page.
You can accept or reject optional analytics using the banner. Both choices allow you to use the Website. You can change your decision or withdraw consent at any time using Cookie settings in the footer. After 180 days, or if you clear your browser storage, we ask again.
3.3. Google Analytics. When configured and only after you select Accept analytics, we load Google Analytics, provided by Google Ireland Limited, to measure visits, pages viewed and interactions with the Website. The legal basis is your consent. Analytics may process online identifiers, browser and device information, approximate location and website usage data. Google processes IP addresses to derive location information; Google states that GA4 does not log or store individual IP addresses.
Google Analytics uses _ga and _ga_* cookies to distinguish visits and maintain session information. We configure these cookies with a maximum lifetime of 180 days, without renewing that lifetime on each visit. Advertising storage, advertising user data, ad personalisation and Google signals are disabled by this integration. No Google Analytics script or measurement request is loaded before acceptance or after rejection.
Withdrawing consent stops further analytics collection, removes accessible Google Analytics cookies for this site and reloads the page to unload analytics. Withdrawal does not delete data already collected. Google may process data outside the European Economic Area. For information about Google’s processing and transfer safeguards, see Google’s partner-site privacy information and Google’s data transfer framework.
3.4. We also process personal data when a data subject applies for a job at Rantelon. Rantelon does not retain documents relating to job applications for more than one year after the recruitment process. During this period, the data is retained with a view to making a job offer in the future.
3.5. Rantelon collects and processes only personal data for which we have clearly established a need in advance.
4. Rights of the data subject
4.1. Right to information about the scope and use of personal data. You have the right to access your personal data and obtain further information about the data Rantelon processes about you. You may also contact Rantelon at info@rantelon.com if you have further questions.
4.2. Right to rectification of personal data. Any data subject who notices that their personal data is out of date, incorrect or in need of correction or completion may contact Rantelon to have the data corrected or updated.
4.3. Right to data portability. Requests for the transfer of personal data sent to info@rantelon.com will be answered within one month at the latest. Rantelon will verify the requester’s identity and inform them which personal data is subject to transfer.
4.4. Right to erasure of personal data. The data subject has the right to request the deletion of personal data that is no longer necessary or appropriate for the purposes for which it was collected or processed. We may sometimes be legally required to retain data, in which case we may be unable to fulfil your request. The same may apply where we are entitled to retain the data to pursue or defend legal claims.
4.5. Right to withdraw consent. Where personal data is processed on the basis of the data subject’s consent, you have the right to withdraw that consent by notifying Rantelon at info@rantelon.com. Withdrawal of consent does not have retroactive effect and does not affect the lawfulness of processing already carried out while the consent was valid.
4.6. Right to lodge a complaint with a data protection supervisory authority. All data subjects have the right to lodge a complaint with the national data protection supervisory authority if they believe that the processing of their personal data does not comply with data protection laws and general data protection rules. In Estonia, the national supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
5. Final provision
Rantelon reserves the right to amend this privacy policy. The policy is therefore reviewed regularly and amended where necessary.