Introduction
The following information is communicated to you so that you can take note of the commitments in terms of the protection of personal data of the company «Rpair OÜ», Harju maakond, Tallinn, Kesklinna Linnaosa, Parnu mnt 141,11314, hereinafter referred to as « Rpair » or « company Rpair » or « we », which acts as controller for the processing of personal data referred to in this document.
Rpair is committed to a policy of respect and protection of personal data. By this policy the company Rpair undertakes, within the framework of its activites, that the collection and the processing of your data, carried out from the site www.rpair.online, hereinafter referred to as "Site" ou "our Site" and/or the Rpair mobile application, hereinafter referred to as "Application" or "our Application" comply with the General Data Protection Regulation and other acts of applicable legislation.
The purpose of this personal data protection policy is to inform you about how this data is collected and processed and about the scope of your rights. It could be necessary to evolve it. We reserve the right to modify, at any time and without notice, all or part of our rules concerning the protection of personal data. As a result, we advise you to refer regularly to the latest version of these rules which is permanently available on our Site and in our Application. The changes come into force on the date they are posted on our Site/our Application and are opposable on the date of your first use. The usage of our Site/our Application implies full acceptance of any revision or modification of our rules concerning the protection of personal data.
By visiting our Site and/or using our Application you agree to the collection, use and transfer of your personal data within the limits and within the framework defined below.
Obviously, you are not required to identify yourself to be able to consult our Site or use our Application. In some cases, you may be asked to leave your personal data this is nominative or directly identifying (name, first name telephone number, postal address, e-mail address, etc.). The mandatory or optional nature of the data is indicated to you when collecting.
Furthermore, when consulting our Site and/or using our Application, we may need to collect and process data relating to your browsing (your IP address, the addresses of the pages you have consulted and the searches that you have carried out), and to your terminal (type of browser used, model and version of your operating system, resolution of your screen, presence of certain plug-ins, etc.).
With your consent, we may also perform your approximate geolocation from your IP address. We may collect your data in particular when you participate in a competition.
2.Principles applicable to the collection and processing of personal data.
Rpair is committed to respecting the following principles in the collection and processing of your personal data.
2.1. Legitimate and proportionate use of your data. Personal data is collected for specified, explicit and legitimate purposes. They may not be used subsequently in a manner incompatible with the initial purposes for which they were collected. For every processing, Rpair is committed to collect and process only the data strictly necessary for the objective pursued.
2.2. Fair and transparent collection.
Rpair provides all the useful information on the purpose and recipients of the collected data. The data is collected fairly; no collection is carried out without the knowledge of the persons concerned and without informing them.
2.3. Relevance, adequacy and minimization of the collected data.
The collected data is strictly necessary for the purpose of the processing. Rpair is committed to minimizing the data collected and to keeping it accurate.
2.4. Protection of personal data by design and by default.
Rpair adopts internal procedures and implements measures which respect the principles of protection of personal data by design and by default.
3.The processing of your data
3.1. The legal bases.
The company Rpair implements various processing obligations based on its legal and regulatory obligations, on its legitimate interest and on the consent of the persons concerned. In the cases where the collection of personal data would require the consent, we will explicitly ask the subject data for their consent.
3.2. The purposes of processing.
We use your personal data for:
- the management of our relationship with you as a user of our Site and/or Application, including in particular: use of the Site/Application and the services they offer; communication management and follow-up of exchanges with users;
- the management of responses to official requests from public or judicial authorities empowered for this purpose;
-the compliance with the regulations applicable to our activity;
-the management of your requests for information and your complaints;
-the prevention and fight against fraud, also including the management of the consequences of this fraud
- the establishment of any means of proof necessary for the defense of our rights;
-the statistics and analyzes in order to improve the functioning of our Sites an our Application;
-the preservation of computer traces in order to prevent security incidents.
If we need to process your data for purpose other than those listed in the paragraph above, we will inform you and take additional steps that may be necessary.
3.3. Data collection
In accordance with the regulation in force, and except for regulatory exceptions of another kind, we never collect the special categories of personal data which are the data revealing the racial or ethnic origin, the political opinions, the religious convictions or philosophical or sexual orientations.
3.4. Persons concerned
The persons concerned by the processing that may be carried out by Rpair are the users of our Site and/or our Application.
3.5. Recipients of the data
To achieve the purposes described above and within the limits necessary for the pursuit of these purposes, the data collected may be transmitted to all or some of the following recipients:
• Rpair partners for the purposes of performing the services offered by the Site and / or the Application;
• our service providers and subcontractors within the strict framework of the performance of the services that we entrust to them (example IT service providers, website hosting, service providers acting as secure third parties in the advertising sector);
• lawyers, court officers and ministerial officers, administrative or judicial authorities seized of a dispute where applicable, within the framework of compliance with the legal obligations incumbent on the company Rpair or in order to allow Rpair to ensure the defense of its rights and interests;
• services responsible for control such as statutory auditors and auditors.
3.6. Duration of data keeping
Rpair keeps the personal data it collects only for the time necessary for the purposes of the processing and in accordance with applicable law. More precisely, the data is kept for five (5) years from the last incoming contact, if the other periods are not imposed by the applicable legislation.
3.7. Security of your data
We give particular importance to the security of your personal data. Thus, we are committed to taking the physical, technical and organizational security measures necessary to preserve the security of your personal data against any unauthorized access, modification, distortion, disclosure and destruction.
However, the security and confidentiality of your personal data are based on individual best practices, so you are invited to remain vigilant on the matter.
In accordance with these commitments, we choose our subcontractors and service providers carefully and impose on them:
• use of personal data or information only to manage the services they are committed to provide;
• strict compliance with applicable laws and regulations regarding confidentiality and personal data;
• the implementation of all appropriate measures to ensure the protection of personal data that they may need to process;
3.8. Data transfer outside the European Union
The different categories of data collected and processed may be transmitted to service providers located in countries outside the European Union such as the United States.
These data transfers are regulated:
• either through the "Privacy Shield" mechanism, a register kept by the US administration guaranteeing that the US companies listed there respect a level of protection of personal data equivalent to that set in the European Union;
• or by a cross-border flow agreement drawn up in accordance with the standard contractual clauses between controller and processor issued by the European Commission and currently in force.
4. Your rights and modalities for their exercise.
4.1. The content of your rights.
You have the following rights relating to data concerning you: right of access; right of rectification; right of erasure (unless the data is necessary for the performance of the services, or they are necessary for the company Rpair to comply with its legal obligations or to establish or exercise its rights); right to give directives relating to the fate of your data after your death, and this with a trusted third party authorized and responsible for ensuring that your orders are respected, in accordance with the requirements of the applicable legal framework.
Under the right of access, Rpair may ask you to pay a reasonable fee based on administrative costs for any further copy requested of the data undergoing processing.
You also have a right to obtain restriction of processing; a right to the portability of the data provided; a right to object to processing.
4.2. Exercise of your rights.
You can request to exercise your right to object to the processing of personal data concerning you for reasons relating to your particular situation when the processing is based on the legitimate interest of the company Rpair. In the event of exercise of that right, the company Rpair will cease processing of that data unless there are legitimate and compelling grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
You can object to any processing related to marketing purposes without invoking any reasons relating to your particular situation. You can also withdraw your consent at any time, in cases where this has been requested.
The communication of specific post-mortem instructions and the exercise of your rights are carried out by e-mail to the address [email protected] or by post to the address: Harju maakond, Tallinn, Kesklinna Linnaosa, Parnu mnt 141,11314, specifying the information necessary to determine your identity.