Privacy Policy

The controller responsible for the Purgato.ee websites is:

Purgato OÜ

Reg number: 12790409

Lai 10/1, 80010 Pärnu, Estonia

+372 5813 5293

info@purgato.ee

Protection of personal data

Personal data is data that Purgato OÜ collects for the provision of services, for identifying a person, for contacting a person in order to provide services, for resolving queries or for sending advertising content.

Purgato OÜ does not process sensitive personal data as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, GDPR, or EU Regulation 2016/679).

Purgato OÜ is committed to protecting the personal data and privacy of its clients and users. Purgato OÜ's online activities comply with all relevant practices and the applicable legislation of the European Union and the laws of the Republic of Estonia, including Regulation (EU) 2016/679 of the European Parliament and of the Council. Purgato OÜ applies all precautionary measures (including administrative, technical and physical measures) to protect the personal data collected. Access to modify and process the data is granted only to persons authorised to do so.

Security

All personal data that becomes known in the course of visiting Purgato OÜ's websites is treated as confidential information.

The following are the principles of Purgato OÜ's privacy policy concerning the collection, processing, use, disclosure, transfer, modification, forgetting and deletion of personal data.

The principles set out here do not apply to the processing of data of legal persons and other companies/institutions, nor do they cover the processing of personal data on websites/service environments linked to from our websites/service environments (external links).

A person representing a company (as the orderer of a service) is not a natural person; they are the authorised representative of a legal person, and the processing of their personal data is not governed by Regulation (EU) 2016/679 of the European Parliament and of the Council.

What data is collected?

When visiting the websites, non-personalised technical data about the visitor is collected.
Technical data is limited to the internet address of the computer or computer network used (IP address), the software version of the computer's web browser and operating system, and the time (time of day, date, year) and place of the visit. IP addresses are not linked to personally identifiable information.
Data is collected on visits to and time spent on the websites in order to improve the websites and service environments and make them more convenient for visitors.
To collect the data mentioned above, we use the automated tool Google Analytics. If you do not wish to share this data about yourself, you can at any time opt out of data collection by Google Analytics, as described here.
For natural persons, the data collected includes, where necessary for unique identification, the personal identification code, and for communication purposes the name, e-mail address, mobile phone number, city and country of location.
For the processing of data of legal persons, we collect the registration number, VAT number, name, country, address, e-mail addresses for contact and invoicing, and the names, e-mail addresses and contact telephone numbers of the contact persons representing the company.
In the case of marketing messages sent by e-mail, we may collect information about your interaction, for example whether you opened the e-mail, which links you clicked, which devices you used for this and what their technical characteristics are. This information is saved in the history of each contact.
While you are in the Purgato OÜ contact database, we may also process your name and e-mail address or mobile phone number for marketing purposes in social media and online advertising (Facebook, Instagram, Google). For these purposes, we process your personal data for 5 years from the date your contact was added to the contact database. Purgato OÜ has a legitimate interest (GDPR Art 6(1)(f)) in sending marketing communications to its contacts in order to maintain a business relationship with them.

Personal data processed by Purgato OÜ's clients and uploaded to the Purgato OÜ environment as part of the service is protected by a confidentiality requirement that applies upon the client signing the service agreement. Purgato OÜ's services can only be used after accepting the agreement. Acceptance of the agreement is verified by the software; if it is missing, the user is asked to accept it.

For the purposes of personal data processing listed in this section, the data is accessible to Purgato OÜ employees, who apply all security measures in their work relating to the processing of your data.

Consent to the collection of related personal data and personal data necessary for the service is given by the person ordering the service at the moment of ordering. By ordering the service, consent is deemed to have been given with the corresponding timestamp.

How long is the collected data retained?

Non-personalised technical data collected from the websites and service environments is retained indefinitely.

Personal data related to personalised queries and/or transactions is retained for up to 7 years from the last interaction with the service provider, in accordance with the obligation under the Accounting Act to substantiate transactions. Interaction includes, among other things, responding to direct marketing by viewing it or clicking on a link.

To whom may the collected data be transferred?

Personal data processed by Purgato OÜ may be transferred without the person's consent only to an authority or person who has a direct statutory right to it (for example, a court or a pre-trial investigation body) and a justified need.

Personal data processed by clients as part of the Purgato OÜ service is treated as confidential, and the right to process, disclose or transfer this data lies solely within the area of responsibility of the data owner (the client).

At the request of a Purgato OÜ client, Purgato OÜ provides technical assistance with data processing, but this does not change the ownership of and responsibility for the data.

What rights does a person have regarding the collected data?

The right to access and correct their data and to request that processing be stopped.

By default, personal data is not disclosed, except where the relevant confirmation has been obtained (participation in training courses / seminars / conferences).

If personal data cannot be modified or accessed, or is not published on the website or in the service environments, a request to obtain or correct the data should be submitted to us in a manner that allows the person to be identified. Where possible, the data will be issued or corrected within 7 working days.

If you wish to unsubscribe from direct marketing offers on all or some topics, you can do so immediately via the link in the footer of every marketing e-mail sent. The change takes effect immediately.

If there is no (longer a) legal basis for processing or disclosing personal data or for providing access to the data, you may demand that the use of the data be stopped or the data deleted, or that the disclosure of or access to the data be ended. To do so, a request should be submitted in a manner that allows the person to be identified.

The request will not be granted if:

it may harm the rights and freedoms of another person,
it may hinder the provision or non-provision of the service,
it may hinder the work of law enforcement authorities,
it is not technically necessary and/or possible.
the applicant is not legally connected to the data.
the applicant's identity cannot be established.

For example:

– An e-mail address cannot be deleted if the person no longer wishes to receive direct marketing offers to it. In order to comply with the request, the e-mail address must be retained for comparison, so that no e-mails are sent to it.

– Not all data can be deleted from the CRM if the person does not wish to be contacted again. In order to comply with the request, sufficient data must be retained for comparison, so that no contact is made.

By using the Purgato OÜ website, you have read and agreed to these principles and terms. We reserve the right to amend the general terms of the privacy policy where necessary, notifying all persons concerned.