Processing of personal data

Last updated: 25.01.2021.

Purpose

The Estonian Employers “Confederation (hereinafter referred to as the ‘Employers’ Confederation” or “we”) hereby informs you of how we collect and use personal data by means of this Privacy Notice. We are guided by applicable personal data protection legislation, including the Personal Data Protection Act and the General Data Protection Regulation (“GDPR”). We implement appropriate organisational, information technology and other measures necessary to ensure the protection of personal data.

Data controller

NGO Estonian Employers’ Confederation (registration code: 80036271)
Kiriku 6, 10130 Tallinn, Estonia
employers@andreskask

What personal data we collect

The Employers’ Confederation collects the following personal data:
– Personal data (name, position, photo, place of residence and address)
– Contact data (phone number, e-mail address, etc.)

Purpose and legal basis for the processing of personal data

The Employers’ Confederation processes the personal data referred to in point 3 for the following purposes:

Sending newsletters to members of the Employers’ Confederation (GDPR Art. 6 (1) a));
Responding to queries made on the website of the Employers’ Confederation (GDPR Art. 6 (1) b));
Fulfilling the legal obligations of the Employers’ Confederation (accounting, responding to requests for information from public authorities and public bodies, etc.) (GDPR Art. 6 (1) c));
The Employers’ Confederation’s legitimate interest (GDPR Art. 6 (1) f)).

On the basis of legitimate interest, personal data are processed for the following purposes, among others:

Organising business breakfasts and other events (registering participants, taking pictures);
Publication of pictures of events on the Employers’ Confederation website and social media;
Developing the services of the Employers’ Confederation;
Data exchange within the Confederation of Employers;
Making, pursuing or defending legal claims;

It is possible to unsubscribe at any time.

Transmission of personal data

In certain cases, we may be required to transfer personal data to public authorities for the purposes set out in point 4, or we may transfer personal data to other third parties on the basis of our legitimate interest, such as information systems developers.

Processing of personal data outside the European Economic Area

Personal data will not be transferred outside the European Economic Area.

Retention of personal data

The Employers “Confederation shall store personal data until the purposes specified in point 4 have been fulfilled or until the expiry of the time limits set out in legislation or until the legitimate interest underlying the processing of personal data by the Employers” Confederation ceases to exist.

Data subject rights

Data subjects have the following rights in relation to their personal data:

The right to request access to your personal data;
The right to request the rectification of personal data if it is inaccurate;
The right to request the deletion of personal data;
The right to request restriction of processing;
The right to the transfer of personal data;
The right to object to the processing of personal data.

To exercise these rights, the data subject can contact us at employers@employers.ee.
In certain cases, these rights may be limited – for example, where we are under a legal obligation to process the data. In our response to the data subject’s request, we will state the reasons for our decision.
Data subjects have the right to lodge a complaint with the Data Protection Inspectorate (Tatari 39, 10134 Tallinn; e-mail: info@aki.ee; tel: +372 627 4135; website: www.aki.ee) or with a court if they consider that their personal data have been processed unlawfully or in breach of their rights in any other way.

Changes

If the Employers “Confederation changes the categories of personal data processed or the purposes for which the data are processed, the Employers” Confederation will make the corresponding changes in this notice and inform the data subject of the changes at his or her e-mail address.