Privacy Policy

1. General information

1.1. This privacy policy governs the processing of personal data on the website kaijaalliksaar.ee and on other related websites and domains.

1.2. Company: Elevoria OÜ (hereinafter Elevoria), registry code 17129519, address: Harju county, Harku parish, Tiskre village, Välja tee 19/1-1, 76916, Estonia.

1.3. The company processes personal data based on this privacy policy and in accordance with applicable law, including the European Union General Data Protection Regulation (GDPR), the Personal Data Protection Act, the Law of Obligations Act, other applicable legislation and established lawful practice.

1.4. Terms used in this privacy policy have the meaning assigned to them in the General Data Protection Regulation.

1.5. This privacy policy applies to all clients who use, have used or have expressed a wish to use the services offered by Elevoria, or who are otherwise connected to Elevoria in any way, including persons who are not clients (website visitors, candidates, etc.).

1.6. By entering into an agreement with Elevoria, clients confirm that they have read and understood this privacy policy and are aware that it may be amended from time to time.

1.7. Elevoria reserves the right to unilaterally amend and/or supplement this privacy policy at any time. The privacy policy is effective from the moment it is published on Elevoria's website and domains: kaijaalliksaar.ee.

1.8. This privacy policy applies to all matters concerning privacy and the processing of personal data.

2. Collection of personal data

2.1. Elevoria may collect personal data in the following ways:

2.1.1. Directly from the client when providing Elevoria's services;

2.1.2. Through various communication channels (email, phone, etc.);

2.1.3. Through service booking forms;

2.1.4. Through website cookies;

2.1.5. Through Elevoria's social media accounts;

2.1.6. Through CVs submitted for job applications.

3. Cookies

3.1. Cookies are small text files that a website stores on a user's computer or other device.

3.2. Elevoria uses cookies to collect statistics on website traffic, the number of users and user activity on the website, in order to improve the website's operation and the user experience it offers.

3.3. Elevoria uses cookie-based analytics to collect the following information: number of active website users; number of website users compared to previous periods; share of returning website visitors; popularity of website sections; popularity of website subsections; browsers used; types of devices used (mobile/desktop/laptop); and other similar data.

3.4. Except for analytics platforms, Elevoria never shares data collected through cookies with third parties. Data shared with analytics platforms (Google Analytics) is provided in aggregated form and in a limited volume that does not allow any user to be identified.

3.5. Restricting and disabling the use of cookies. Clients may disable cookies from being stored on their device or delete stored cookies from their device. Users can disable the use of cookies and delete cookies through their browser's security settings. In such cases, the website's functioning on the user's device may in some instances be affected.

4. Legal bases, purposes and retention of personal data processing

4.1. Elevoria processes personal data on the following legal bases: performance of a contract; Elevoria's legitimate interest; the client's consent; fulfilment of legal obligations.

4.2. Elevoria processes personal data for the following purposes: performing an agreement entered into with the client, including processing the client's contact details to confirm/update/cancel orders or bookings and to provide services; direct marketing (for example, sending newsletters), based on the client's consent; processing client data in order to resolve client enquiries, fulfil requests and orders; evaluating and improving the quality of services, conducting market research on services; recording and responding to fraudulent, disputed or unlawful client behaviour; ensuring compliance with legislation and requirements of authorities; developing Elevoria's services.

4.3. Duration of processing. Personal data is retained for as long as necessary to fulfil the purposes of the processing. Personal data collected within contractual relationships is retained until the contractual obligations have been fulfilled. The retention period for obligations arising from legislation (including accounting) is set according to the requirements of the applicable legislation. Personal data collected on the basis of the client's consent is retained until the client withdraws that consent. Where Elevoria processes personal data on the basis of legitimate interest, the data is retained for as long as necessary to achieve the purpose of the processing. Personal data that is no longer needed is deleted or anonymised.

5. Disclosure of personal data and restrictions on disclosure

5.1. Elevoria does not disclose personal data to third parties, except where such an obligation arises from law or where the client has given Elevoria consent to do so.

5.2. Elevoria discloses personal data to the following third parties: IT support partners, with whom Elevoria maintains the website, newsletter services, databases and hosting environment; to persons to whom the client has given consent for disclosure; to national supervisory and investigative authorities on the basis of legislation; to authorised processors who process personal data on Elevoria's behalf.

6. Protection of personal data

6.1. Elevoria ensures the confidentiality of personal data by applying appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing or disclosure, accidental loss, alteration or destruction.

6.2. Elevoria processes personal data in a manner that ensures its secure retention.

6.3. Access to personal data is granted only to persons who need that data to provide Elevoria's services.

7. Client rights

7.1. The client has the right to: obtain information about which personal data Elevoria has collected about them and how it is processed; request correction of inaccurate personal data; request deletion of their personal data, where processing of that data is not required by law; request that personal data be transferred to another service provider, i.e. data portability; request restriction of the processing of personal data; withdraw consent previously given, where processing is based on consent; request that no decision concerning them be made based solely on automated processing; lodge a complaint with the Estonian Data Protection Inspectorate if the client believes their rights have been violated in the processing of their personal data.

8. Contact details

8.1. For questions and enquiries regarding the protection of personal data, please write to: kaija@kaijaalliksaar.ee.