Privacy policy
1. General provisions
1.1. This buyers’ privacy policy regulates the principles governing the collection, processing, and storage of personal data. Personal data is collected, processed and stored by the data controller Saksa Automaatika Inseneribüroo OÜ, registration code 16971438, legal address Gaasi tee 3, Lehmja küla, Rae vald 75306 Harjumaa, telephone +372 605 2526, e-mail info@saksa-automaatika.ee (hereinafter referred to as the data processor). Saksa Automaatika Inseneribüroo OÜ conducts B2B sales and serves only business customers on the basis of a valid customer agreement.
1.2. For the purposes of the privacy policy of data subjects who are buyers, a business customer is a buyer whose personal data is processed by the data processor.
1.3. The data processor complies with the principles of data processing set out in legislation, including processing personal data lawfully, fairly and securely. The data processor is able to confirm that personal data has been processed in accordance with the provisions of legislation.
2. Collection, processing, and storage of personal data
2.1. The personal data collected, processed, and stored by the data controller is mainly collected electronically via e-mail and also when the data subject submits a query or question or sends information via the contacts provided on the data subject’s website or social networks or via the e-store. The data processor processes data in such cases to manage inquiries and complaints, to ensure the quality of the services offered, and to protect its rights and legitimate interests.
2.2. By sharing the personal data of the data subject and persons related to the data subject, the data subject grants the data processor the right to collect, organize, use, and manage personal data for the purposes specified in the privacy policy, which the data subject shares with the data processor when concluding a customer contract and during its term, including when purchasing goods or services directly or indirectly on the website.
2.3. The data subject is responsible for ensuring that the data they provide is accurate, correct, and complete. Knowingly providing false information is considered a violation of the privacy policy. The data subject is obliged to immediately notify the data processor of any changes to the data provided.
2.4. The data processor is not liable for any damage caused to the data subject or third parties by the submission of false data by the data subject.
3. Processing of the data subject’s personal data
3.1. The data processor may process the following personal data of the data subject:
• First and last name of representatives or authorized persons;
• Date of birth or personal identification code of representatives or authorized persons;
• Document number of representatives or authorized persons;
• Contact details, e.g. E-mail address; telephone number
• Delivery address;
• Payer details
• Bank account number;
• Payment card details;
• Purchase history, including, for example, information about goods and services and contacts
• Data related to participation in surveys, satisfaction surveys, and campaigns aimed at buyers.
3.2. In addition to the above, the data processor has the right to collect data about the data subject that is available in public registers.
3.3. The legal basis for the processing of personal data is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation:
a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
f) processing of personal data is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
3.4. Processing of personal data in accordance with the purpose of processing:
• Personal data is processed primarily for the purpose of fulfilling the customer contract concluded with the buyer and for fulfilling legal obligations.
• Personal data such as the name of the buyer’s representative, personal identification code, and document number are used to identify the correct authorized person when ordering and delivering goods and services.
• Contact details such as e-mail, telephone number, and contact person are used to carry out activities related to the sale of goods and services and to communicate marketing and work organization information. Contact details are also used to conduct customer satisfaction surveys.
• The delivery address and contact details are used to deliver goods and/or to communicate information about the readiness or dispatch of goods.
• Payer details and bank account numbers are used primarily for linking payments. Bank account numbers are used to refund payments to buyers if necessary.
• Purchase history information is used in customer management analyses, to find purchased goods more quickly, and to compile statistical data.
3.5. The data processor has the right to share the buyer’s personal data with third parties, such as authorized data processors, accountants, transport and courier companies, marketing partners, customer satisfaction survey companies, transfer service providers, and companies providing collection services. The data processor shall forward the personal data necessary for making payments to the authorized processor Maksekeskus AS. The data processor is the controller of personal data. Personal data is transferred on the condition that the purpose and processing are lawful and that the processing of personal data is carried out in accordance with the instructions of Saksa Automaatika Inseneribüroo OÜ.
3.6. When processing and storing the personal data of data subjects, the data processor shall implement organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.
3.7. The data processor shall store the data subjects’ data depending on the purpose of processing, but for no longer than 10 years after the data subject’s last purchase.
4. Rights of the data subject
4.1. The data subject has the right to obtain information about the processing of personal data.
4.2. The data subject has the right to request the correction of incorrect, inaccurate, or incomplete data, the deletion of their personal data, or the restriction of its processing if the personal data is processed without complying with legal requirements or if there is another legal basis for doing so.
4.3. The data subject has the right to request the transfer of their personal data to another data processor or to transfer it directly to the data subject (applies to personal data submitted to the data subject that is processed automatically on the basis of a contract or consent).
4.4. The data subject has the right to object to the processing of their personal data, unless there are legal grounds for such processing or the data is necessary for the establishment, exercise or defense of legal claims.
4.5. The data subject has the right to withdraw their consent to the processing of personal data at any time if their personal data is processed on the basis of separate consent.
4.6. The data subject may exercise their rights by contacting the data controller at info@saksa-automaatika.ee. They also have the right to submit a corresponding request to the Data Protection Inspectorate.
5. Final provisions
5.1 The data processor confirms that it processes the data subject’s personal data in accordance with the requirements established in European Union and national legislation and, in particular, in accordance with the principles of lawfulness, fairness, transparency, purpose limitation and data minimization.
5.2. The data processor has the right to change the data protection conditions in part or in full, notifying data subjects of the changes via the website www.saksa-automaatika.ee.