Privacy Policy

TERMS AND CONDITIONS FOR THE PROCESSING OF PERSONAL DATA at Arens AS

1.DEFINITIONS
1.1. Personal data – any information relating to an identified or identifiable natural person;
1.2. Processing of personal data – any operation which is performed on personal data or on sets of personal data;
1.3. Customer or you – a natural person who visits the Website;
1.4. Arens AS or we – registry code 10254960;
1.5. Terms and conditions – these terms and conditions for the processing of personal data;
1.6. Data controller – Arens AS;
1.7. Website – this website www.arens.ee;
1.8. Data processor – a person who processes personal data on our behalf.

2. GENERAL
2.1. These terms and conditions describe the conditions under which we process personal data. The protection of personal data is important to us, so we only process personal data if there is a legal basis and for legitimate purposes, ensuring the security and protection of personal data.
2.2. If the need arises, we can change these terms and conditions to ensure that they comply with the law. We therefore recommend that you visit the website from time to time to keep yourself informed of the terms and conditions. We will always indicate the date from which the terms and conditions have been in force in the current wording.

3. PURPOSES AND LEGAL BASIS OF PROCESSING
3.1. When you send us enquiries or other requests via the enquiry form on the website, you acknowledge that we need to process your personal data to respond to you. We have a legitimate interest in processing personal data in such cases, and in certain cases, it is also necessary for the purposes of making an offer, placing an order, fulfilling an order, and ensuring compliance. The purpose of such processing of personal data is therefore to (1) ensure efficient and pleasant customer service, or to (2) prepare offers, (3) place orders, (4) organise transport and installation, provide relevant information in this regard, and complete the order.
3.2. We process personal data for the purposes of fulfilling our legal obligations to (1) ensure the protection of rights relating to personal data, (2) store personal data for the purposes of fulfilling our legal obligations, and (3) comply with any other legal obligations.
3.3. We use cookies on our website. Cookies are small blocks of data in text form that are stored in your web browser or on your device when you visit a website. Some of the cookies are linked to the website (so-called first-party cookies), and we also use third-party cookies. Cookies are necessary to ensure the correct functioning of the website and to make it more convenient for you to use it. For example, cookies allow us to remember your preferences and collect data about your use of the website, enabling us to provide you with personalised content and providing input for analysis and statistics. The information available to us through cookies cannot be linked to any particular natural person.
3.4. We use third-party cookies from Google Analytics, Facebook, Adroll, and Hotjar in accordance with the terms and conditions of these service providers. We use them for the following purposes: (1) analysing website traffic, (2) offering social media opportunities, and (3) displaying targeted advertising content. However, it is possible that through these cookies, data about the use of the website is shared with third parties, who may combine the data with other data available to them.
3.5. We ask each visitor of the website to consent to our use of (1) third-party cookies and (2) first-party cookies for the purpose of compiling anonymous website traffic statistics. We will not use these cookies without your consent.
3.6. If you want to restrict the use of cookies by the website, please disable the cookies or delete stored cookies and consult the settings of your web browser. Please note that restricting or disabling cookies may affect the proper functioning of the website.
3.7. We will always ask for your prior consent to process your personal data for purposes other than those set out in the terms and conditions.

4. COMPOSITION OF PERSONAL DATA
4.1. In order to achieve the purposes set out in the terms and conditions, we need to process some or all of the following personal data: (1) your name, (2) your email address, (3) your telephone number, (4) your address, (5) information collected in the course of carrying out legal obligations. The exact composition of the personal data processed varies from case to case. We will always follow the principle that we process the minimum amount of personal data necessary for achieving our purposes.

5. DISCLOSURE AND TRANSMISSION OF DATA
5.1. We have the right to disclose and transfer personal data without prior consent to comply with our legal obligations and also to processors. We have the right to disclose personal data to third parties, including providers of legal counsel, auditors, debt collectors, etc. to protect our rights.

6. STORAGE OF PERSONAL DATA
6.1. We will retain your personal data for as long as necessary to fulfil the purposes described herein, to protect our rights, or to comply with our legal obligations. We will keep the data of a customer who contacted us via the enquiry form for up to five years from the last time the customer contacted us.

7. RIGHTS OF THE DATA SUBJECT
7.1. By law, you have the right to (1) request information from us about the processing of your personal data and, in certain cases, request (2) the rectification of the personal data, (3) the erasure of the personal data, (4) restriction of processing, or (5) object to the processing. If we are processing your personal data on the basis of consent, (6) you may withdraw your consent at any time, in which case, we will stop processing your personal data. This does not affect any processing operations previously carried out. We will respond to your requests as quickly as possible, taking into account the legal deadlines.

8. CONTACT DETAILS, COMPLAINTS, PROTECTION OF RIGHTS
8.1. If you have any questions or concerns regarding the processing of your personal data, you can contact either us as the data controller (Arens AS; Vasula tee 40, 60515 Kõrveküla, Tartu County; arens@arens.ee; phone +372 7300960) or the Data Protection Inspectorate (info@aki.ee; phone 627 4135; additional information).
8.2. If a breach occurs related to your data that is likely to pose a risk to your rights and freedoms, we will notify the Data Protection Inspectorate within 72 hours of becoming aware of the breach and notify you without undue delay, unless the applicable law provides otherwise.

The terms and conditions of the privacy policy of Arens AS are effective from 1 September 2023