The controller of personal data of the website Caravanrent.ee is THEG Invest OÜ.
What personal data is processed
− name, telephone number and email address;
− bank account number;
− cost of goods and services and payment-related data (purchase history);
− customer support data.
For what purpose is personal data processed
Personal data is used to manage customer reservations and prepare the rental agreement.
The bank account number is used to refund payments to the customer.
Personal data such as e-mail, telephone number, customer name are processed to resolve issues related to the provision of services (customer support).
The IP address or other network identifiers of the website user are processed to provide the website as an
information society service and to compile web usage statistics.
Legal basis
The processing of personal data is carried out for the purpose of fulfilling the contract concluded with the customer.
The processing of personal data is carried out to fulfill a legal obligation (e.g. accounting and
resolving consumer disputes).
Recipients to whom personal data is transferred
Personal data is transferred to the website’s customer support to manage reservations and
resolve customer problems.
If the website’s accounting is carried out by a service provider, then personal data is transferred to the service provider for accounting operations.
Personal data may be transferred to information technology service providers if this is necessary
to ensure the functionality or data hosting of the website.
Security and data access
Personal data is stored in zone. ee servers located in the territory of a member state of the European Union or a country that has joined the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed by the European Commission as adequate and to US companies that have joined the Privacy Shield framework.
Access to personal data is available to website employees, who can review personal data in order to resolve technical issues related to the use of the website and provide customer support services.
The website implements appropriate physical, organizational and information technology security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.
The transfer of personal data to the website’s authorized processors (e.g. data hosting) takes place on the basis of agreements concluded between the website and the authorized processors. Processors are required to ensure appropriate safeguards when processing personal data.
Withdrawal of consent
If the processing of personal data is based on the customer’s consent, the customer has the right to withdraw the consent
by informing customer support by e-mail.
Retention
When closing a customer account on the website, personal data will be deleted, unless such data is required for accounting purposes or to resolve consumer disputes.
If a purchase is made on the website without a customer account, the purchase history will be retained for three years.
In the event of disputes related to payments and consumer disputes, personal data will be retained until the claim is satisfied or the statute of limitations expires.
Personal data required for accounting purposes will be retained for seven years.
Deletion
To delete your personal data, please contact customer support via email. The deletion request will be responded to no later than within a month and the period for data deletion will be specified.
Transfer
A request for the transfer of personal data submitted by email will be responded to within one month at the latest. Customer support will verify your identity and inform you about the personal data that is subject to transfer.
Direct Marketing Notifications
Email address and phone number are used to send direct marketing notifications if the customer has given their consent. If the customer does not wish to receive direct marketing communications, they must select the relevant link in the footer of the email or contact customer support.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profiling related to direct marketing, by informing customer support by email (the relevant information must be provided clearly and separately from any other information).
Dispute resolution
Disputes related to the processing of personal data are resolved through customer support
(puhkus@caravanrent.veebilahendus.ee). The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).