Introduction

The following information is being shared with you so that you are aware of the commitments by the company "Rpair OÜ", Harju county, Tallinn, Kesklinna Linnaosa, Parnu mnt 141, 11314, hereinafter referred to as "Rpair" or "company Rpair" or "we", which acts as a controller for processing personal data referred to in this document.

Rpair is committed to a policy of respect and protection of personal data. With this policy, the company Rpair undertakes, within the framework of its activities, that the collection and processing of your data, carried out from the website www.rpair.online, hereinafter referred to as the "Site", or "our Site", and/or the Rpair mobile application, hereinafter referred to as the "Application" or "our Application", comply with the General Data Protection Regulation and other applicable legislation.

The purpose of this personal data protection policy is to inform you about how this data is collected and processed and about the scope of your rights. It may be necessary to update it. We reserve the right to modify, at any time and without notice, all or part of our rules concerning the protection of personal data. Therefore, we advise you to regularly refer to the latest version of these rules which is permanently available on our Site and in our Application. The changes come into force on the date they are posted on our Site/our Application and are applicable on the date of your first use. The use of our Site/our Application implies full acceptance of any revision or modification of our rules concerning the protection of personal data.

By visiting our Site and/or using our Application, you agree to the collection, use and transfer of your personal data within the limits and within the framework defined below.

You are not required to identify yourself to be able to consult our Site or use our Application. In some cases, you may be asked to leave your personal data that is nominative or directly identifying (name, first name, telephone number, postal address, e-mail address, etc.). The mandatory or optional nature of the data is indicated at the time of collection.

Furthermore, when consulting our Site and/or using our Application, we may need to collect and process data relating to your browsing (your IP address, the addresses of the pages you have consulted and the searches that you have carried out), and to your terminal (type of browser used, model and version of your operating system, resolution of your screen, presence of certain plug-ins, etc.).

With your consent, we may also perform your approximate geolocation based on your IP address. We may collect your data, in particular, when you participate in a competition.

2. Principles applicable to the collection and processing of personal data.

2.1. Legitimate and proportional use of your data. Personal data is collected for specified, explicit and legitimate purposes. It may not be used subsequently in a manner incompatible with the initial purposes for which it was collected. For every processing, Rpair is committed to collect and process only the data strictly necessary for the objective pursued.

2.2. Fair and transparent collection.

Rpair provides all the useful information on the purpose and recipients of the collected data. The data is collected fairly; no collection is carried out without the knowledge of the persons concerned and without informing them.

2.3. Relevance, adequacy and minimization of the collected data.

The collected data is strictly necessary for the purpose of the processing. Rpair is committed to minimizing the data collected and to keeping it accurate.

2.4. Protection of personal data by design and by default.

Rpair adopts internal procedures and implements measures that respect the principles of protection of personal data by design and by default.

3. The processing of your data

3.1. The legal bases.

The company Rpair implements various processing obligations based on its legal and regulatory obligations, on its legitimate interest and on the consent of the persons concerned. In cases where the collection of personal data would require consent, we will explicitly ask the subject data for their consent.

3.2. The purposes of processing.

We use your personal data for:

- the management of our relationship with you as a user of our Site and/or Application, including in particular: use of the Site/Application and the services they offer; communication management and follow-up of exchanges with users;

- the management of responses to official requests from public or judicial authorities empowered for this purpose;

- the compliance with the regulations applicable to our activity;

- the management of your requests for information and your complaints;

- the prevention and fight against fraud, including the management of the consequences of this fraud;

- the establishment of any means of proof necessary for the defense of our rights;

- statistics and analyses in order to improve the functioning of our Sites and our Application;

- the preservation of computer traces in order to prevent security incidents.

If we need to process your data for purposes other than those listed in the above paragraph, we will inform you and take additional steps that may be necessary.

3.3. Data collection.

In accordance with the regulation in force, and except for regulatory exceptions of another kind, we never collect the special categories of personal data which are the data revealing the racial or ethnic origin, the political opinions, the religious convictions, or philosophical or sexual orientations.

3.4. Persons concerned.

The persons concerned by the processing that may be carried out by Rpair are the users of our Site and/or our Application.

3.5. Recipients of the data.

To achieve the purposes described above and within the limits necessary for the pursuit of these purposes, the data collected may be transmitted to all or some of the following recipients:

- Rpair partners for the purposes of performing the services offered by the Site and/or the Application;

- our service providers and subcontractors within the strict framework of the performance of the services that we entrust to them (example IT service providers, website hosting, service providers acting as secure third parties in the advertising sector);

- lawyers, court officers and ministerial officers, administrative or judicial authorities seized of a dispute where applicable, within the framework of compliance with the legal obligations incumbent on the company Rpair or in order to allow Rpair to ensure the defense of its rights and interests;

- services responsible for control such as statutory auditors and auditors.

3.6. Duration of data keeping.

Rpair keeps the personal data it collects only for the time necessary for the purposes of the processing and in accordance with applicable law. More precisely, the data is kept for five (5) years from the last incoming contact if the other periods are not imposed by the applicable legislation.

3.7. Security of your data.

We give particular importance to the security of your personal data. Thus, we are committed to taking the physical, technical and organizational security measures necessary to preserve the security of your personal data against any unauthorized access, modification, distortion, disclosure, and destruction.

However, the security and confidentiality of your personal data are based on individual best