When processing personal data, we are guided by applicable personal data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and the Estonian Personal Data Protection Act.
FS respects your rights to your privacy controls. It is important for us to be able to enforce your rights. Below you will find details on how to do it.
Terminology and definitions
The data subject is an identified or identifiable natural person whose data are processed;
Personal data is any information about an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as name, personal identification code, location information, network identifier or by one or more physical, physiological, genetic, mental, economic, cultural or social characteristics of that natural person;
The processing of personal data is an automated or non-automated process or set of operations involving personal data or sets of such data, such as collection, documenting, organizing, structuring, storing, adapting and modifying, making inquiries, reading, using, transmitting, distributing or otherwise making available, unification or merging, limiting, erasing or destroying;
Profile analysis is any automated processing of personal data that involves the use of personal data for the assessment of certain personal aspects related to a natural person. In particular, for analyzing or predicting aspects related to the performance of the natural person concerned, the economic situation, health, personal preferences, interests, reliability, behavior, location or movement;
The processor is a natural or legal person, public authority, agency or other body that determines the purposes and means of the processing of personal data, either alone or in conjunction with others; where the purposes and means of such processing are determined by Union or national law, the controller or the specific criteria for his designation may be laid down in Union or national law;
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;
A set of data is any structured set of personal data that can be found on the basis of certain criteria, whether centralized, decentralized or dispersed on a functional or geographical basis;
The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether a third party or not. Public bodies which, in accordance with the law of the Union or a Member State, may receive personal data relating to a particular query shall not be considered as a recipient; these public authorities process these data in accordance with the applicable data protection rules in accordance with the purposes of the processing;
The third party is a natural or legal person, public authority, agency or body, with the exception of the data subject, the controller, the processor and the persons who may process the personal data under the direct authority of the controller or processor;
The “consent” of the data subject is a voluntary, specific, informed and unambiguous declaration of intent by which the data subject, whether in the form of a declaration or explicit consent, agrees to the processing of personal data concerning him or her.
Responsible data processor
It is possible to contact FS Data Protection Officer by e-mail firstname.lastname@example.org
What personal information does FS collect and use?
Website Browsing Statistics
FS wants to make your website as easy to use as possible. In order to improve the user experience, the following information is stored on your FS homepage, among other things: browser type and version, device type and operating system, IP address, length and time of the website visit session, pages visited, and demographic information such as preferred language and location of the language used. We use the data collected as web page browsing statistics in anonymous form and we do not bring them together with any specific natural person.
In order to collect and analyze the above-mentioned data, FS uses the Google Analytics tool. You can disable your data collection at any time by Google Analytics as described here.
The server hosting FS site may also store the queries you make to the server (the web address you open, the browser you are using and the device, the IP address, the access time). These data are only used for technical purposes – to ensure the proper functioning and security of the website and to investigate potential security incidents.
What are cookies?
A cookie is a small text file that a website saves on your computer or mobile device when you visit a website. This allows the website to remember your activities and preferences over a long period of time so that you do not have to re-enter them when you visit the site again or when you move from one page to another.
However, please be aware that the website also uses permanent cookies that are stored on your computer after you close the browser. Persistent cookies may remain on the user’s computer for days, months or even years. Such cookies will also help us guide you to the ad you see primarily on Facebook and / or Google, as well as on Instagram and / or YouTube.
Disable and delete cookies
As an Internet user, you can disable or restrict the storage of cookies on your computer. You can also delete all cookies that have been stored on your computer so far. To do this, you need to change your personal web browser privacy settings. Here we note that if you want to do so, you may have to manually adjust certain preferences each time you visit a website, and certain services and functionality may not work.
FS can use the statistics of visitors to the website to analyze the trends and demographics of visitors to the FS website, but no individual profiles are created for visitors.
If you want to buy goods or services through the FS website or get more information about it, sharing personal information with us is necessary. It is possible to submit inquiries by filling in the relevant contact form or by sending an e-mail to email@example.com
In order to respond to your inquiry, we collect the following personal information: your name, contact information (email, phone number). When filling out the contact form, all the information chips that you have previously stored with cookies will also be associated with the personal information you have provided through the contact form. In other words, there is a so-called contact history.
The legal basis for such processing of personal data is the processing of personal data for the performance of a contract entered into with the data subject or for the conclusion of pre-contractual measures at the request of the data subject (GDPR Art 6 (1) (b)). The above personal data will be accessible to FS staff. If you submit a request through a contact form, we may also have access to the personal information provided by our partner who provides IT services. We take appropriate technical and organizational measures to ensure the security of personal data.
Retention of personal data collected from inquiries for 5 years from request. FS has a legitimate interest (GDPR Art 6 (1) (f)) to make sales statistics for better planning of your business.
Providing services to customers
If the FS provides a service to you or your company, then the processing of personal data will also take place and therefore sharing of personal data with us is necessary.
We process personal data of our customers primarily for the sale and / or delivery of purchased goods / services and for preparing offers. For this purpose, we process the following personal information: name, contact information, delivery address. We process the personal data listed for as long as the contract is in force and can be accessed by our contractual accountant in addition to FS employees. The legal basis for such processing of personal data is the processing of personal data for the performance of a contract entered into with the data subject or for the conclusion of pre-contractual measures at the request of the data subject (GDPR Art 6 (1) (b)).
During the customer relationship and for 5 years after its completion, we process the personal data of our clients for statistical purposes (sales statistics) and for archiving customer contracts. FS has a legitimate interest (GDPR Art 6 (1) (f)) to make sales statistics for better planning of your business and keeping records of your customers.
If your business is in arrears, be aware that we process your personal information to manage your debts as long as your debt is settled. Here, we share your personal information with our contractual accountant. If the bill goes beyond the two-month payment deadline, we will have to disclose the debt on public channels. If the bill goes beyond the three-month payment deadline, we will have to pay the debt. FS has a legitimate interest (GDPR Art 6 (1) (f)) to collect debts from its customers.
We process the personal data of our current customers during customer relationship and personal data of former customers 3 years after the end of the customer relationship for potential sales, ie for direct marketing of similar services. FS has a legitimate interest (GDPR Art 6 (1) (f)) to maintain a business relationship with its current and former customers.
FS asks its customers and other individuals interested in receiving direct marketing notifications to provide relevant news about the goods, services, and promotional campaigns offered by FS.
By joining our newsletter on the FS website, we may send you periodic e-mail information about our services and cabinets and offers. We’re processing your name and email address to send marketing notifications via email. When filling out the contact form, all the information chips that you have previously stored with cookies will also be associated with the personal information you have provided through the contact form. In other words, there is a so-called contact history.
In certain cases, when it comes to natural persons, we need to ask for the consent of the data subject to send marketing communications via email. If you have not given consent to such personal data processing, we will not process your personal information for this purpose. Consent does not stop, but if you no longer want to receive marketing messages, you can easily remove yourself from the list at the end of the message (“remove from list” or “unsubscribe”). You also have the right to object to the processing of your personal data for direct marketing at any time.
When the FS sends you an email, the FS can collect statistics about your communication with that communication, for example, if you opened an email, what links you press, what devices you use for it, and what their technical features are. This information is stored in the contact history.
Sometimes we evaluate the behavior of our contacts before sending a newsletter. This is necessary for us to send you more personalized messages via email. FS has a legitimate interest (GDPR Art 6 (1) (f)) to understand the needs and preferences of its contacts to provide them with more relevant information.
Please be aware that if you are in our contact base, we may process your name and email address or mobile phone number to show ads to you, or to people like you (“lookalic audience”) on Facebook, Google, LinkedIn and / or Instagram. For these purposes, we will process your personal information for 5 years after you add your contact base. FS has a legitimate interest (GDPR Art 6 (1) (f)) to send marketing communications to its contacts to maintain a customer relationship with them.
For the purposes of the processing of personal data listed in this section, FS staff will have access to the data. You can also access personal information from a partner that provides IT services to us. We take appropriate technical and organizational measures to ensure the security of personal data.
Your rights and how you can exercise your rights
By contacting FS via e-mail firstname.lastname@example.org , you may exercise the following rights:
- the right of access to your personal data;
- the right to rectify personal data;
- the right to delete personal data;
- the right to transfer personal data;
- the right not to be subject to a decision based solely on automated processing;
- the right to withdraw consent.
In certain cases, you have the right to request that you restrict the processing of your personal data and the right to object to the processing of your personal data.
You may exercise your rights in accordance with the terms of the GDPR and other local laws.
If you believe your privacy has been compromised, please contact us at the email address below. You also have the right to complain to the data protection supervisor of the country where you are domiciled. In Estonia, this is the Estonian Data Protection Inspectorate.
If you have any questions, feel free to contact our Data Protection Officer at email@example.com
This is a translated content, the original of this document is written in Estonian language.