Description of Data Protection Activities

Description of data protection activities Description of data protection activities in accordance with §§ 10 and 24 of the Personal Data Act (523/99) and the EU General Data Protection Regulation (GDPR). Chief processor: Perel Eesti AS, registry code 10261492 Contact details of the chief processor: Perel Eesti AS Mustamäe tee 62 12916 Tallinn, phone +372 6998840 info@perel.ee Contact person for questions concerning personal data: Urmas Kulm, Perel Eesti AS Mustamäe tee 62 12916 Tallinn, phone +372 6998844 urmas.kulm@perel.ee Name of the register: Perel Eesti AS customer register. Purpose of the processing of personal data Personal data may be processed for the following purposes: customer relationship management, provision of services, registration of customer contacts, customer service and business development, statistical data collection and analysis, marketing and advertising, for other similar uses. Customer data can also be used for market or customer satisfaction surveys and to communicate with customers. Registry information We collect the following data in our systems: statutory statistics on customers, sales and products; names of contacts, job descriptions, contact details (eg addresses, telephone numbers, e-mail addresses, fax numbers); business communication and business relationship data; information about the client’s organization, offers, products of interest, project schedules, completed projects, project-related documents; marketing authorizations and prohibitions and marketing referral data; information collected about your use of the Service, such as device information, IP addresses, operating system, and Internet service cookies. Conventional sources of information The sources of information are data collected from the customer himself via the Internet service, by telephone, post, e-mail or other similar means, and from the controller’s systems when registering as a user of the services and during use using cookies and other relevant technologies. Personal data may also be collected and updated from third party address information systems, the credit data register, the controller’s cooperation partners and public media. Data transmission The controller may transfer data to the extent permitted and required by applicable law for the purposes of the controller’s partner system, for example for marketing purposes, provided that the data protection entity has not prohibited such transfer of its data. We do not sell the personal data in the register to third parties. Transfer of data outside the EU and EEA countries Personal data will not be transferred outside the EU or the European Economic Area.

Principles of registry protection

Only those persons employed by the Perel Group and other separately designated persons who need data in the performance of their duties have the right to use the customer register. These individuals have access to personal usernames and passwords. The data is collected in databases that are protected by firewalls, passwords and other technical means. The databases and their backups are located in locked premises and can only be accessed by the above-mentioned persons.

Rights of the data protection subject

The data protection subject has the following rights, the applications for the exercise of which must be submitted to:
Urmas Kulm Family Eesti AS Mustamäe tee 62, 12916 Tallinn phone +372 6998844 urmas.kulm@perel.ee

Right to verify data

The customer has the right to check the data concerning him.

Right to correct data

The data protection subject may request the correction of false or incomplete data concerning him.

Right to request erasure of data

The data protection subject has the right to request the deletion of data concerning him or her. We will process your request and then either delete the data or report a good reason why the data cannot be deleted.

Right not to allow processing of data

The data protection subject has the right not to allow the processing of data.

Prohibition of direct marketing

The data protection subject has the right to prohibit the use of his or her data for direct marketing purposes.

Right of appeal

The data protection subject has the right to lodge complaints with the Data Protection Commissioner against the decisions made.

Contact details of the Data Protection Commissioner:

:  www.tietosuoja.fi/fi/index/yhteystiedot.html