At Eesti Firma OÜ, protecting your personal information is our main priority. Our commitment to data privacy is founded on a set of basic principles derived from the General Data Privacy Regulation (GDPR).
These principles drive all of our decisions about how we handle your information and serve as the foundation for our internal procedures. These principles are detailed below, together with an explanation of how they are applied and your rights as a data subject.
For additional information on how we process and protect your personal data, please see our Privacy Policy, which is a distinct document.
Lawfulness, Fairness, and Transparency
With justice as the cornerstone and complete openness toward you as the data subject, we are convinced that all data processing operations have to follow accepted legal rules. We present some background before going into the main practices to help you grasp our approach:
Please keep in mind that every activity we do stems from a commitment to legal integrity, fair treatment, and openness before we go over our particular acts. The specifics below illustrate how we apply these values in our daily work:
Lawfulness:
- We only handle your personal data under a clear, legitimate legal basis. This implies that every instance of data processing—for customer assistance, service delivery, or website operation—is done precisely in line with relevant legislation.
- Our legal bases include your consent, contractual commitments fulfilled, legal requirements followed, and our justifiable commercial interests.
Fairness:
- Every activity we do guarantees fair and just results. Being completely open about why your data is needed and how it will be used helps us to avoid any covert or unfair practices.
- At all phases of processing, we work to treat your personal data in ways that honor your rights and dignity.
Transparency
- Our commitment is on keeping an honest conversation with you regarding the handling of your data.
- To keep you always informed about how your data is being used, we continually update our policies and offer clear, easily available, comprehensive information about our data processing activities.
Purpose Limitation
Personal data should, in our opinion, only be used for precisely stated, clearly defined objectives that you have been informed of. We wish to underline before going into our procedures how highly we regard this principle. The following describes how we guarantee your data is used only in ways you would expect:
- We only gather your personal information for explicitly stated, specified, and legal uses that are obviously expressed at the time of collection.
- Your data is utilized exactly in line with the indicated original uses during data collecting. Any more processing is limited to goals fit for the original intent.
- To guarantee continuous compliance with this concept, we routinely go over the reasons behind the data collecting.
Data Minimization
Data reduction is the idea we follow to lower the risk connected with data processing. We want to restrict the extent of data collecting to just what is absolutely required, so before introducing the specific measures it is crucial to know this. The following highlights this method:
- We gather just the personal information required to reach the desired goals.
- Reducing the volume of data we gather helps us to lower the possible dangers related to illegal access or data leaks.
- Every data collecting form or interaction is meticulously crafted to guarantee that just the information needed for that particular procedure is sought for.
Accuracy
Ensuring accuracy in your personal data is a basic pillar of our data security strategy. It is rather necessary since maintaining your trust and the quality of our services depends on data correctness. To explain specifically, consider the following:
- By means of proactive methods, we actively preserve your personal data correct, comprehensive, and current.
- Should you find errors in your records, you are advised to notify us so that we may promptly correct them.
- Should accuracy be really essential for the delivery of our products, we could request extra validation to guarantee the correctness of the data we have at hand.
Storage Limitation
We pledge to store your personal data only for as long as necessary to suit the intended function for which it was collected. Let me emphasize before we review our specific policies how critical lowering data retention is to our data security strategy. We manage this as follows:
- We explicitly retain times for numerous types of personal data depending on operational concerns, contractual obligations, and legal restrictions.
- Once the retention period ends or the data is no more needed, we carefully delete or anonymize your personal data to ensure it cannot be connected to your identity.
- We periodically review our data retention rules to ensure we do not keep records longer than necessary.
Integrity and Confidentiality
Our first concern is absolutely protecting your personal data’s integrity and confidentiality. We want you to be sure your data is protected with the best techniques applied. Our strategy is outlined below:
- To protect your data from illegal access, modification, or disclosure, we apply strong technological and organizational policies including encryption and tight access limits.
- To handle new risks and vulnerabilities, our security systems and procedures are constantly watched over and upgraded.
- Confidentiality agreements bind all staff, contractors, and outside service providers with access to your personal information; they also give regular data security best practice training.
Accountability
At Eesti Firma OÜ, we understand that keeping your trust depends mostly on responsibility. It’s crucial to realize that we are in charge of every element of data processing before enumerating our procedures. Among our policies are:
- Our organizational culture now incorporates data security so that every staff member knows and follows GDPR guidelines.
- Policies, methods, and our data processing activities are routinely checked for compliance and extensively recorded.
- Periodically internal audits and risk analyses help us to guarantee that our data security policies are current and efficient.
- Our staff is kept updated about the most recent advancements in data security via ongoing training courses.
Conclusion
Our basic commitment to safeguarding your privacy and preserving your confidence drives our focus to GDPR compliance above mere legal duty fulfillment. We guarantee that your personal data is handled with the best of care by following the guidelines of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidence, and responsibility.
Updates and Legal Information
We reserve the right to update or modify this document at any time to reflect changes in our practices or due to regulatory or legal requirements. Any changes will be posted on this page, and the “Last updated” date will be revised accordingly. We encourage you to review this document periodically for any updates.
Contacts
If you have any questions or inquiries regarding the personal data protection, or the processing of personal information on our website, please contact us:
Company name: Eesti Firma OÜ
Data Protection Officer (DPO) is: Ilja Nikiforov
Email: info@eestifirma.ee
Phone: +372 6417777
Address: Vesivärava 50, Tallinn, Estonia, 10152
We are committed to responding to your inquiries promptly and providing comprehensive information on any questions you may have.
