Privacy policy
By registering as a user of Elamusmajutus.eu or booking an accommodation package through the Elamusmajutus.eu portal, the user consents to the processing of their personal data and to receive future notifications from the administrator of the Elamusmajutus.eu portal. The administrator of Elamusmajutus.eu discloses the necessary personal data only to the accommodation facility where the user has made a reservation, for the provision of a product or service.
1. GENERAL TERMS
1.1. This privacy policy regulates the principles regarding the collection, processing and storage of personal data. Personal data is collected, processed and stored by Majutuselamus OÜ, the controller of personal data (hereinafter referred to as the data processor).
1.2. In this context, a data subject is a registered or unregistered customer whose personal data is processed by the data processor. A customer is a person who uses the Elamusmajutus.eu portal for their own personal purposes to book an accommodation package, purchase a gift card, or view the accommodations affiliated with the portal and their options.
1.3. The data processor complies with the data processing principles set out in legislation, including processing personal data lawfully, fairly and securely. The data processor is able to confirm that personal data has been processed in accordance with the provisions of legislation.
2. COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA
2.1. The personal data that the data processor collects, processes and stores is predominantly collected electronically, mainly via the website and email, and is only data that the portal User shares with the portal voluntarily.
2.2. By sharing their personal data, the data subject grants the data processor the right to collect, organize, use and manage the personal data that the data subject directly or indirectly shares with the data processor when purchasing services on the website, for the purposes specified in the privacy policy.
2.3. Andmesubjekt vastutab selle eest, et tema poolt esitatud andmed oleksid täpsed, õiged ja terviklikud. Teadlikult valeandmete esitamist peetakse privaatsuspoliitika rikkumiseks. Andmesubjekt on kohustatud andmetöötlejat viivitamatult teavitama esitatud andmete muutumisest.
2.4. The data processor is not liable for any damage caused to the data subject themselves (e.g. making a reservation under a false name) or to third parties due to the data subject providing false information.
3. WHAT DATA DO WE COLLECT AND WHY?
3.1. Information about purchase and service orders and newsletter subscribers – Elamusmajutus.eu collects personal data of site users and personal information of the client, such as name, date of birth, address, e-mail address, telephone number, for the purpose of better functioning of the service. This data is not public and is disclosed, if necessary, only to the accommodations where the User has made a reservation, in order to ensure the smooth functioning of the service.
3.2. IP address and “cookie” information – Like many other websites, the Elamusmajutus.eu website records your IP address and uses a standard technology called “cookies”. Cookies are small data files that are stored on your computer when you visit the website. Cookies help your web browser to automatically identify itself on the Elamusmajutus.eu server and adapt the service to you more personally. If you wish, you can block the storage of cookies in your web browser, although this may cause problems with using the page in certain areas of the website. The computer’s IP address is not linked to the personal data of the site user. This means that during your visit session to the site, only statistical data is collected about your visit, which is used in site analytics. Cookies are sent to the web browser only if you have given your consent to store the information.
3.3. Marketing and advertising data – In addition to the use of personal information mentioned above, Elamusmajutus.eu may use the data collected when visiting the website to track products and services of interest to buyers in order to personalize advertisements for products and services to the customer. When communicating with us and providing us with feedback, we may maintain correspondence in order to improve the products, services or website. Majutuselamus.eu may use the data you disclose to send notifications, for example, when the terms of use of the website change or to provide important information about changes to products, services.
4. PROCESSING OF CUSTOMERS' PERSONAL DATA
4.1. The data processor may process the following personal data of the data subject:
4.1.1. First and last name;
4.1.2. Date of birth;
4.1.3. Telephone number;
4.1.4. Email address;
4.1.5. Bank account number;
4.1.6. Payment card details;
4.2. The legal basis for the processing of personal data is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation:
a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
b) the processing of personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract at the request of the data subject;
c) the processing of personal data is necessary for compliance with a legal obligation to which the controller is subject;
f) the processing of personal data is necessary for the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
4.3. The processing of personal data is necessary for marketing, customer management and security purposes.
4.4. The data processor has the right to share customers’ personal data with third parties, such as the accommodation service provider with whom the data subject has made a reservation and if sharing personal data is necessary for the provision of the service.
4.5. When processing and storing the personal data of the data subject, the data processor implements organizational and technical measures that ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.
4.6. The data processor retains the data of data subjects depending on the purpose of the processing, but not longer than 7 years, as required by law.
5. DATA SUBJECT RIGHTS
5.1. The data subject has the right to access and review their personal data.
5.2. The data subject has the right to receive information about the processing of his or her personal data.
5.3. The data subject has the right to supplement or correct inaccurate data.
5.4. If the data processor processes the data subject’s personal data based on the data subject’s consent, the data subject has the right to withdraw consent at any time.
5.5. To exercise their rights, the data subject can contact Elamusmajutus.eu customer support at info@elamusmajutus.eu.
5.6. The data subject has the possibility to file a complaint with the Data Protection Inspectorate to protect his or her rights.
6. FINAL TERMS
6.1. These data protection terms and conditions have been prepared in accordance with the Personal Data Protection Act of the Republic of Estonia and the General Data Protection Regulation (GDPR; EU 2016/679), or the European Union General Data Protection Regulation (GDPR).
6.2. If you have any questions about data processing, data subjects can contact the administrator of Elamusmajutus.eu via info@elamusmajutus.eu.