All persons whose data Aldar Eesti OÜ processes shall henceforth be referred to as clients.
What personal data is processed?
Personal data include all of the information Aldar Eesti OÜ collects on clients for the aims set out in these personal data processing principles, including:
What is the reason for processing personal data?
Aldar Eesti OÜ processes personal data for the following purposes:
Forwarding of personal data
Upon processing personal data, Aldar Eesti OÜ may use third-party service providers that provide services needed by Aldar Eesti OÜ (e.g. information technology service providers, direct marketing service providers, payment and postal service providers, accounting service providers and transport service providers).
Personal data are processed with the aim of performing the contract entered into with the client (article 6 1) b) of regulation 2016/679/EU).
Personal data are processed in order to perform a legal obligation (e.g. accounting or resolving customer disputes) (preamble p 52, article 6 1) c) of regulation 2016/679/EU).
Aldar Eesti OÜ takes appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss or alteration and unauthorised access and disclosure.
Forwarding personal data to third parties (e.g. a transport service provider or data housing) is done pursuant to the contracts entered into between Aldar Eesti OÜ and the data processors. The data processors must ensure appropriate safeguards when processing personal data.
Clients’ rights regarding processing of personal data
A client may review their personal data on the website www.kaart.aldar.ee by entering the self-service environment. Citizens of Estonia can enter this environment by identifying themselves using their ID card, Mobile ID or a bank link or via e-mail. Citizens of other countries can log in via e-mail.
Storage of personal data
Aldar Eesti OÜ may process your personal data for as long as necessary in order to fulfil the client relationship or any other similar relationship between you and Aldar Eesti OÜ, or until you withdraw your consent for the processing of your personal data or until the deadline provided in law. In the case of disputes concerning payments and consumer disputes, the personal data are stored until the claim is satisfied or until the end of the limitation period (three years). Personal data needed for accounting purposes are stored for seven years as of the end of the calendar year.
Personal data are erased upon the closure of a customer account, unless the storage of the data is necessary for accounting purposes or the settlement of consumer disputes. If a purchase was made without using a client account, the purchase history is preserved for three years.
Amendment of data processing principles
Aldar Eesti OÜ reserves the right to amend its data processing principles at any time. The amended principles shall be enforced from the moment they are published on the website www.kaart.aldar.ee. We recommend visiting this page from time to time to make sure that the current data processing principles are acceptable to you.