Privacy Notice

Privacy notice

The main activity of the NGO Koduõpetaja is Estonian language teaching.

In this Privacy Notice, we explain how we collect and use personal information from our customers and business partners (hereinafter referred to as “you”) and what your rights are in relation to your personal information.

 

1. Data controller

NGO Koduõpetaja (registration code 80597727)

Address: Kristalli 7-13, Tartu 50145

E-mail: koduopetajake@gmail.com

 

2. What personal data are processed?

In order to provide language learning services, we ask our clients and participants of the training courses for the following data:

• first name and surname;
• personal identification number;
• contact details (phone, e-mail address).

We collect and use this data to comply with our legal obligations, contracts and commitments (e.g. sending training information and materials, sending invoices, etc.).

According to the Adult Training Act, we must issue certificates and attestations to participants, which must include the name and personal identification number of the participant.

We will also use contact details of customers and training participants to send marketing communications (e.g. training offers), but only with their consent.
This consent can be withdrawn and no further communications will be sent. Consent is not linked to the possibility to participate in training or other services.We will need the name and email address of the client and the participant in order to invoice.We also process the following information about our customers in relation to all services:

• contracts concluded and orders placed;
• information on payment obligations;
• correspondence relating to contracts.

We need this information to have an overview of contractual relationships and to be able to properly execute contracts and orders placed, as well as to correctly record the services rendered in the accounts.
These data are also necessary for the settlement of any legal disputes (this is our legitimate interest).

In the course of providing the training service, we process the following personal data of our customers:

• the name of the training course for which you have registered via our website’s online form or otherwise;
• Previously completed NGO Koduõpetaja training (including certificates and attestations of completion);
• training fees paid, which we use to comply with the reporting obligations under the Income Tax Act (we submit data to the Estonian Tax and Customs Board annually on training expenses paid by natural persons that are subject to income tax relief);
• details of attendance and absence from training, as the extent to which the curriculum has been completed determines whether or not we are entitled to issue a certificate of attendance (basis: Adult Training Act).

The processing of personal data depends on the data that customers and partners disclose to us and the data we need to provide our services and fulfil our obligations.

 

3. With whom do we share your personal data?

We follow the principle of minimal data transfer.
This means that we will only transfer data to the recipient to the extent that it is necessary and justified for the purposes for which it was collected and transferred.

If the participant is not the payer or the final payer, we will pass on his/her details to the final payer (e.g. employer, Unemployment Insurance Fund).
The final payer has a legitimate interest in receiving information about the services for which he has paid.
We will send the final payer enrolment or individual attendance sheets showing the name of the participant, his/her personal identification number, the time and place of the training and the participant’s signature.
The final participant is also entitled to receive a copy of the certificate or attestation certifying the completion of the training.

We will pass on the details of the participants (first name, surname and, if necessary, personal identification number) to the lecturer conducting the training, as it is the lecturer’s responsibility to check whether the registered persons are attending the training and which of the registered persons are present.

We will provide the postal or courier service providers with the customer’s name, address and, if necessary, telephone number to send the mail.

The email address and telephone number will be used to send marketing communications if the customer has given their consent.
Where personal data is processed for direct marketing purposes, the customer has the right to object at any time to both the initial and further processing of his or her personal data, including profiling in relation to direct marketing.

We may also use other support services (e.g. IT and legal services) to provide our services.
All service providers are our authorised data processors and are entitled to process personal data received from us only to the extent necessary to provide the service and only on the basis of the rules and instructions provided by us.

In the event of a payment default, we may transfer information on the debt (including the customer’s identification number, the date of the default and the amount) to the default register. We may also transfer data relating to the non-payment to debt collection agencies, legal service providers, courts and other persons and bodies involved in the handling of claims in order to protect our rights and interests.We may have to disclose information about our clients’ participants in training courses to supervisory and law enforcement authorities where we are required to do so by law (e.g. the Ministry of Education and Research, the Consumer Protection Board, the Data Protection Inspectorate, etc.) or where there is a legal obligation to disclose the information ourselves (e.g. to comply with information obligations to the Tax and Customs Board, etc.).

 

4. How do we store your personal data?

Employment contracts and contracts for services provide for confidentiality of client data.
The NGO Koduõpetaja implements appropriate physical, organisational and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

Access to personal data is granted to the employees and contractors of the NGO Koduõpetaja, who can access personal data in order to resolve customer queries or technical issues related to the use of the website.

 

5. How long do we keep the data?

In retaining personal data, including records containing personal data, we will do so for as long as is necessary to fulfil the purpose for which we collected the data or for as long as retention is required by law.

The personal data we collect relating to whom and how we have provided a service may also be relevant in legal disputes.
Therefore, in order to protect your legitimate interests, we will keep this data subject to the maximum limitation periods.

 

6. What are your rights in relation to the processing of your personal data?

Data subjects have a number of rights under data protection legislation (in particular the European General Data Protection Regulation 2016/679), which we summarise below:

• right of access (the right to know what data we have collected about you, the purposes for which it is processed, to whom it is disclosed, and for how long it is kept);
• the right to rectification (the right to request the rectification of personal data concerning you if it is inaccurate or incomplete);
• the right to erasure of your data (in particular, if we no longer need it or if you withdraw your consent for us to process your data and there is no other basis for further processing);
• the right to object to the processing of personal data;
• the right to restriction of processing (in certain cases, the right to prohibit or restrict the processing of your personal data for a certain period of time, e.g. if you have objected to the processing);
• the right to withdraw your consent to the processing of your personal data, in whole or in part, where the processing was based on your consent (including the right to object to the processing of your data for direct marketing);
• receive personal data in a structured and electronic form in a commonly used machine-readable format and transfer that data to another service provider (unless the data is not subject to the right of portability);
• refer a personal data processing breach to the Data Protection Inspectorate or to the courts.

 

7. Changing your privacy notice

This Privacy Notice may be unilaterally modified by the NGO Koduõpetaja.
In particular, we will do so if legal regulations or our own processing operations change.

We will notify you of any changes to the privacy notice on our website.

The current privacy notice is always available on our website.