Data protection conditions

1.Data controller

Karev OÜ
Veerme 23, 11625, Tallinn
Estonia
(hereinafter “Karev” or “we”)

2. Contact

Kalev Kaup
Karev OÜ
Veerme 23, 11625, Tallinn
Estonia
info@karevrehvid.ee
55916302
karevrehvid.ee

3. Definitions used in the Data Protection Clauses

Personal data – any information relating to an identified or
identifiable natural person (“data subject”).

Processing of personal data – personal data or their
an automated or non-automated operation or set of operations performed on collections
collection.

User – a natural person who visits our website at
: karevrehvid.ee

4. What are the legal bases for processing personal data and the purposes of
?

The basis for the processing of personal data is the performance of a contract, the legitimate interest of Karev
(such as managing customer relationships), your consent, and the legal obligation of Karev
.

The purposes for which personal data are processed are:

delivering our products and services, maintaining and developing
,
fulfilling our contractual obligations and other responsibilities at
,
ensuring and protecting our contractual and legal rights at
,
managing customer relationships and communicating with customers at
,
e-marketing and direct marketing,
targeted advertising through our and other web services
,
legal obligations regarding the retention of documents
.

We use automated decision-making (including profiling),
to identify the online behavior of data subjects and to create profiles based on the information obtained from
. We use this information for targeted marketing and
to improve our services.

5. What personal data do we process?

We process the following personal data of the User:

Basic information about the data subject, such as
the first and last name of the author or sender of copyrighted material;
The data subject’s contact information, such as
email address; phone number; mailing address;
Information related to the data subject’s behavior
when using the services and website, which is used to create a profile
, such as websites and services visited,

duration of visits/use, actions taken on the
websites and services;

Technical information about the data subject’s end devices,
such as IP address, cookie data, MAC address, and operating system;
Any opt-outs and
consents regarding direct marketing;
Other information
provided by the data subject.

6. Where can we get personal data?

We obtain personal data related to the user primarily from the user at
.

Such data is updated manually by the user via
.

7. To whom do we disclose personal data, and do we transfer personal data from
outside the EU or the EEA?

We process information ourselves and use authorized processors,
, who process personal data on our behalf and for us, for example, by providing maintenance and
customer support, maintenance and hosting of cloud computing services, marketing services
and IT infrastructure, as well as hardware and
network connectivity for our products and services. To protect your personal data, we have entered into personal data processing agreements
with all of the aforementioned authorized processors, who process
your personal data on our behalf and for our benefit.

We may disclose data to public authorities if such an obligation
arises from legislation.

We do not transfer or disclose personal data related to our customers to parties outside the EU/EEA at
.

8. How do we protect personal data and how long do we keep it?

Access to systems containing personal data is restricted to
only those of our employees who, by virtue of their job duties, are required to process customer data at
. Each user has a personal
username and password to log into the system. Data is collected in databases that are protected
by firewalls, passwords, and other technical measures. The databases and their backups (
) are stored in locked rooms and are accessible only to individuals who have been previously authorized to do so (
).

We retain personal data for as long as necessary, taking into account the purpose of processing the personal data at
.

Users’ personal data is processed and stored for the duration of the customer relationship
and for as long as we provide services, and for three (3) years after the end of the customer relationship
or the provision of services, unless otherwise required by law.
The personal data of potential customers will be deleted or updated if
it is found to be outdated or if there has been no response to marketing activities.

We regularly review the need to retain data, taking into account applicable law at
. In addition, we take all reasonable measures
to ensure that the registry does not retain any personal data that is inconsistent with the purposes of processing
, or that is outdated or inaccurate.
We will correct or delete such data immediately.

9. How and for what purposes do we use cookies?

Karev uses cookies (
) to ensure a better user experience. In addition to the cookies provided by Karev, certain elements of the website
may also contain third-party cookies.

The Karev website uses persistent, session, tracking, and
advertising cookies, which enable us to display ads on
tailored to user preferences, compile anonymous statistics about visitors to the Karev website, and
provide the features necessary for the website to function.

Users of this website have the right to opt out of cookies by changing the settings in their
web browser. Information and instructions can be found at
and www.aki.ee/et/kupsised. If you opt out of cookies, some features of the website
may not function as usual.

10. What rights do you have as a data subject?

As a data subject, you have the right to request access to the personal data collected about you at
, and you have the right to request that your personal data at
be corrected or deleted. You also have the right to withdraw or modify your consent to the processing of your personal data at
in situations where the processing is based on your consent at
.

As a data subject, you have the right, in accordance with the EU General Data Protection Regulation (
) and the
, to object to the processing of your personal data or to restrict the processing of your personal data.

In addition, you have the right to request that your data be provided to you in a commonly used format at
if the processing of your data is based on your consent or on a contract concluded between us at
.

You also have the right to file a complaint with the Data Protection Inspectorate at
or to take legal action to protect your rights if you feel that your rights have been violated at
.

You also have the right, based on your specific circumstances, to object to profiling and other processing related to you at
, provided that the processing of your personal data at
is based on our legitimate interests.

With regard to your request, you should specify the specific
situations in which you object to such data processing. We may refuse to comply with such a request pursuant to applicable
legislation.

As a data subject, you have the right at any time to object to direct marketing by
, including profiling for direct marketing purposes.

11. Who to contact?

All applications and requests related to this section must be submitted in writing to
at the address specified in paragraph two (2).

12. Possible changes to this Data Protection Notice

In the event that we need to amend these Privacy Policy terms,
we will post the amended Privacy Policy on our website along with a reference to the effective date of the change
. If the changes are significant, we may also notify you
in other ways, such as by sending an email or posting an official notice
on our website. We recommend that you review our Privacy Policy from time to time to
stay informed of any changes that may have been made.