1. General provisions

1.1. This Privacy Policy sets out the principles governing the collection, processing and storage of personal data. Personal data is collected, processed and stored by the controller of the personal data. NGO Cats Shelter.

1.2. For the purposes of the Privacy Policy, a data subject is a natural person who requests to take a pet through a data processor and whose personal data are processed by the data processor.

1.3. The data processor complies with the data processing principles set out in the legislation, including processing personal data lawfully, fairly and securely. The data controller is able to confirm that the personal data have been processed in accordance with the law.

2. Purpose of collecting personal data

2.1. The data controller collects personal data from data subjects for one of the following purposes:

2.1.1. to determine the suitability of the data subject for the acquisition of the selected pet; or

2.1.2. for the drafting of the assignment contract, to ensure that the necessary information is available for the realisation of the contractual rights and obligations.

3. Collection of personal data

3.1. The data subject shall provide the data necessary to fulfil the purpose referred to in point 2.1.1 during the completion of the electronic questionnaire or during further communication after submitting the request to the data processor to take the pet.

3.2. The data subject shall provide the data necessary for the purpose referred to in point 2.1.2. only after the data controller has approved the application submitted by the data subject.

3.3. The data processor collects personal data from the data subjects only to the minimum extent necessary to fulfil the purposes set out in clauses 2.1.1. and 2.1.2. above.

3.4. It is the data subject’s responsibility to ensure that the data he or she provides is accurate, correct and complete. The data processor shall not be liable for any damage caused by the submission of false data by the data subject to the data subject or to third parties.

4. Retention of personal data

4.1. The Data Controller will retain the personal data provided to it only for as long as necessary for the purposes specified in this Privacy Policy. After that period, the personal data shall be disposed of, unless their retention is required by law or for the fulfilment of contractual rights and obligations.

5. Processing of personal data of data subjects

5.1. A data processor may process the following personal data of a data subject:

5.1.1. First name and surname;

5.1.2. Phone number;

5.1.3 Identity code;

5.1.4. E-mail address;

5.1.5. Document number;

5.1.6. Current account number;

5.1.7. The address is

5.2. The legal basis for the processing of personal data is Article 6(1)(a), (b) and (c) of the General Data Protection Regulation:

1. (a) the data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes;
2. (b) processing of personal data is necessary for the performance of a contract concluded with the data subject or in order to take steps at the request of the data subject prior to entering into a contract;
3. (c) the processing is necessary for compliance with a legal obligation to which the controller is subject.

5.3. The data processor will only use the personal data collected for the contractual purposes.

5.4. The data processor shall not disclose the data to third parties, except for the purpose of providing a payment service to Maksekeskus AS or if the data processor has a legal obligation to do so.

5.5. When processing and storing personal data relating to a data subject, the data controller shall implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful forms of processing.

6. Data subject rights

6.1. Data subjects have the right to know what personal data is being held by the data controller and to request the rectification, alteration or erasure of the data held.

6.2. Where a data controller processes personal data of a data subject on the basis of the data subject’s consent, the data subject has the right to withdraw his or her consent at any time.

6.3. To exercise their rights, data subjects can contact the e-shop’s customer support by email at the following address. info@kassideturvakodu.ee.

6.4. If the data subject considers that his or her rights have been infringed, he or she can lodge a complaint with the Data Protection Inspectorate to protect his or her rights.

7. Final provisions

7.1. These Data Protection Terms and Conditions have been drafted in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC / EC (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia and the legislation of the Republic of Estonia and the European Union.

7.2. The data controller has the right to modify the data protection conditions, in whole or in part, by informing data subjects of the modifications on the website (www.kassideturvakodu.ee) via.