Important information about personal data of customers and partners
Ida-Viru Ettevõtluskeskus SA
9003367
Keskväljak 4, 41531 Jõhvi, Eesti
Personal data may include, in certain cases, the name, email, phone number, and other similar data, and in some cases, also the address and project file.
Personal data provided to us by our clients or partners may be shared and processed both by SA Ida-Viru Enterprise Center and by third parties who purchase our services and on whose behalf we act within certain activities (e.g. MTÜ Maakondlikud Arenduskeskused, Riigi Tugiteenuste Keskus, Ettevõtluse Arendamise SA, etc) as necessary for the fulfillment of the contract concluded with the client or partner. If explicitly required by law, your personal data may also be shared with competent authorities.
We do not distribute, use, alter, or transmit personal data entrusted to us in any unauthorized manner, except where there is an agreement with the client or partner, or where the need to disclose such information arises from applicable laws. We take appropriate measures to protect personal data from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access.
Please do not hesitate to contact us
If you receive notifications from us without having provided us with your data or requested information, please let us know by emailing: info@ivek.ee
If you have any suggestions or questions regarding the processing of your personal data, please contact us at: info@ivek.ee
If you believe that your privacy rights have been violated, you can file a complaint with the Data Protection Inspectorate. If your permanent residence is in another EU member state, you can find the relevant authority’s contact information here.
What personal data does IVEK process?
Identification data – first and last name.
Contact data – email, phone number, postal address, etc.
Service data – data collected or created in the course of providing services (including consulting services, training, mentorship programs, etc.);
Communication data – such as visual and/or audio recordings collected when you attend events, activities, business trips, or fairs organized by IVEK, or when you communicate with IVEK via email, messages, or other communication channels (e.g., social media), as well as data collected through feedback or satisfaction surveys or studies;
Campaign data – data regarding participation in games and campaigns, such as prizes won in games or campaigns.
How does IVEK collect personal data?
IVEK collects personal data that:
- You enter on the websites ivek.ee, idaviru.ee, arenduskeskused.ee, ettevotlusnadal.ee, loomeklaster.ee, hariduskopter.ee, loomefond.ee (hereinafter referred to as the Website);
- You provide to IVEK via email, phone, or other means of communication;
- You provide to IVEK through social media (e.g., Facebook, Instagram, LinkedIn);
- You provide to IVEK, a cooperation partner, or other third party (e.g., Maakondlikud Arenduskeskused) who has the right to transfer the data to IVEK;
- You provide to IVEK orally and/or in writing during a meeting at the office, on client days, or at other events;
- You provide to IVEK through registration forms.
For what purposes and how does IVEK process personal data?
IVEK processes your personal data for the preparation, conclusion, and fulfillment of contracts, as well as for resolving potential disputes arising from contracts. IVEK collects and processes your data primarily when providing you with consulting services or other services, or when concluding cooperation agreements.
IVEK also processes the data you provide to IVEK, such as when registering for events, or data provided via phone, email, social media, or other means to the extent necessary for providing you with services. If you have registered for an event or ordered services, IVEK may send you necessary materials and/or reminders.
IVEK processes your personal data to make you offers and to send you invitations and additional information. If you have provided personal data to IVEK, you give IVEK consent to send you information about information days, fairs, international visits, contact trips, and other events organized or mediated by IVEK that are similar to those you have previously shown interest in (direct marketing offers). Giving consent is voluntary, and you have the right to withdraw consent at any time. In such a case, we will stop processing your data from the moment of withdrawal.
If you participate in campaign games on the websites and/or social media channels, IVEK processes your personal data to the extent necessary to determine the winner and deliver the prize. Participation in campaign games is voluntary.
IVEK may also process your personal data based on consent for other purposes. The purpose of processing will be specified during the consent process. Each consent given for processing is voluntary, and you have the right to withdraw consent at any time. The withdrawal of consent does not affect the processing that took place before the withdrawal.
IVEK processes your personal data to fulfill obligations arising from legal acts. Obligations mainly arise from the General Data Protection Regulation, the Personal Data Protection Act, the Law of Obligations Act, and other applicable legal acts. For example, IVEK has reporting obligations as stipulated in the Structural Assistance Act for the period 2014-2020 and accounting obligations, which require the processing and use of your personal data. Your personal data may also be transferred to the tax authority and other government agencies, as well as to auditors.
IVEK processes your personal data based on IVEK’s legitimate interest, including for business purposes and for security purposes. For example, IVEK has a legitimate interest in retaining your contact information to send feedback or satisfaction surveys to improve service quality and to investigate or limit the misuse of services and support. IVEK may also process your personal data based on legitimate interest when making photo and video recordings at information days, fairs, visits, international visits, contact trips, or other events organized by IVEK for marketing purposes. Photo and/or video recordings from these events are used to inform clients about our activities via newsletters or social media.
IVEK uses CRM software for processing your personal data and managing client relationships, owned by SA Ida-Viru Enterprise Center. Access to your personal data is granted to the foundation that provided the consulting service (IVEK).
IVEK always ensures that data processing is legal and strictly limited to the purpose for which the personal data was originally collected. IVEK also limits data processing to the minimum necessary, considering the purpose of the processing.
IVEK ensures that personal data is processed in a way that guarantees data security, including protection against unauthorized or illegal processing and accidental loss, destruction, or damage.
IVEK has the right and obligation under legal acts to retain collected personal data. IVEK does not retain personal data longer than necessary to fulfill IVEK’s obligations unless you have given consent for longer retention and processing. Generally, IVEK retains your personal data for 4 years, following the provisions of Article 140 of Regulation (EU) No 1303/2013 of the European Parliament and of the Council and the Structural Assistance Act. Data contained in accounting documents is retained for seven years in accordance with the law.
If data is transferred to another data controller, the other data controller determines the purposes of processing and the retention periods.
To whom does IVEK disclose personal data?
IVEK discloses personal data only to the extent and in the form necessary to fulfill the purposes listed in the privacy terms, including the preparation and fulfillment of contracts concluded with you or making you offers.
IVEK may disclose personal data to authorized and responsible processors who need access to the data to provide services to IVEK. For example, IVEK discloses personal data to the marketing platforms MailChimp and GetResponse, which provide IVEK with the service of sending e-direct marketing offers.
IVEK is also obligated to disclose personal data if such an obligation arises from legal acts (e.g., disclosing personal data to authorities upon their lawful request). IVEK has reporting obligations as stipulated in the Structural Assistance Act. Members of the County Development Centers NGO (foundations) transmit data necessary to fulfill legal obligations to the County Development Centers NGO.
IVEK generally ensures data processing and storage within the territory of the European Union. IVEK may also use authorized processors whose servers are located outside the European Union. In such cases, IVEK ensures the comprehensive security of your personal data, relying, among other things, on the EU-US Privacy Shield Framework or implementing other data protection measures required by law.
What are your rights concerning personal data processing?
If you do not wish to receive direct marketing offers, you have the right to notify IVEK at any time. IVEK will fulfill your request within a reasonable time. Detailed information on opting out of direct marketing offers is provided in the offer itself.
You have the right to receive information about the personal data processed about you by IVEK, their purposes, types, and sources. You also have the right to receive copies and extracts of the personal data processed about you. You have the right to request the correction or supplementation of the data if it turns out that the processed personal data is incorrect or inaccurate. Where applicable, you have the right to request the restriction of your personal data processing or to object to such data processing.
You have the right to request the transfer of processed personal data. The data will be provided to you in a machine-readable file via email. You also have the right to request the transfer of the processed data to another data controller.
You have the right to request the deletion of data unless the right and obligation to process the data arises from legal acts. The processing of personal data will not cease if it would conflict with the obligation to process personal data or if there is another basis for continuing the processing. It is also important to note that terminating the processing of personal data may prevent the provision of services to you. In particular, you have the right to request the termination of personal data processing and the deletion of data if:
- The personal data is no longer needed for the purpose for which IVEK processed it;
- You withdraw the consent given for processing, and there is no other legal basis for processing the personal data;
- You object to the processing of personal data, and there are no overriding legitimate reasons for processing;
- The personal data has been processed unlawfully;
- The personal data must be deleted to comply with a legal obligation.
IVEK responds to objections and requests within one month at the latest.
IVEK processes your personal data in balance with your rights and freedoms. If you believe that your rights have been violated in the processing of personal data or if you want IVEK to stop processing your personal data, please contact IVEK, and we will try to resolve disagreements through negotiations. In case of a dispute, you have the right to contact the Data Protection Inspectorate (Väike-Ameerika 19, 10129 Tallinn; website www.aki.ee) or a competent court.
IVEK reserves the right to amend these privacy terms. The terms are primarily (but not exclusively) amended to comply with data protection-related legal acts. You will be notified of changes to the privacy terms via email or Facebook, and the new terms will be available on the IVEK website.
Where can you get more information?
If you have any questions or suggestions, please contact us at andmekaitse@ivek.ee.