Privacy Policy and Terms of Prangli Reisid OÜ

Effective from 25.05.2018

This privacy policy outlines the general principles we follow when processing personal data. To provide you with an application or service experience tailored to your needs, Prangli Reisid OÜ needs to process your personal data. Your personal data helps us understand your needs and offer you the best support and advice. We require your data to improve the quality of our services or to fulfill obligations arising from law or legal actions.

Prangli Reisid OÜ, as the data controller, determines the purposes and means of processing personal data and informs you more precisely about the privacy terms, including the purposes of personal data processing, your rights, and the obligations and responsibilities of Prangli Reisid OÜ related to personal data processing. To provide our clients with an excellent experience and an overview of all that Prangli Reisid OÜ offers, it is necessary to share your personal data with authorized processors. The personal data collected by Prangli Reisid OÜ is accessible to three employees of Prangli Reisid OÜ:

  • contact: annika@pranglireisid.ee
  • contact: marketing@pranglireisid.ee
  • contact: info@pranglireisid.ee

General Principles

We always process personal data lawfully. We define clear objectives and process personal data only for those purposes. We collect and process only relevant and necessary personal data.

According to legal requirements, we may be obliged to disclose personal data or provide access to personal data to authorities and supervisory bodies. Additionally, we may transfer personal data to our authorized processor if it is necessary to achieve the purpose of personal data processing.

We retain personal data only as long as required by law or contract or as necessary for our business operations. Upon termination of retention, we permanently delete the personal data.

Cookies and Their Removal

A cookie is a small text file that a web server sends to a user’s web browser and is stored on the user’s computer hard drive, allowing the user’s preferences such as font size, communication language, device information, visit statistics, etc., to be remembered.

All web browsers are set by default to accept cookies, but browser settings can generally be changed to refuse cookies entirely, block third-party cookies, or notify the user of each cookie sent.

Prangli Reisid OÜ uses the following cookies:

  • Session cookies (temporary cookies), intended to enable the use of the service.
  • Persistent cookies (stored on the user’s computer after closing the web browser), intended to remember the client’s choices on Prangli Reisid OÜ websites.

Specifically, Prangli Reisid OÜ uses:

  • Analytical cookies that collect information about how the website is used. For example, which content pages are visited most or what visitors search for on the website, etc. These cookies do not collect information that would directly identify the website user. This includes, for example, Google Analytics and Hotjar cookies.
  • Advertising cookies that help deliver advertisements targeted to the user’s interests. For example, the pranglireisid.ee website includes the Facebook Pixel code, and if you no longer wish to see Prangli Reisid OÜ website advertisements on Facebook, you can disable it. Open https://www.facebook.com/ads/preferences and delete Prangli Reisid/Prangli Travel under “Advertisers you’ve interacted with”.
  • Third-party cookies, e.g., YouTube, videos are not displayed if the privacy terms have not been agreed to. To make this technically possible, we use the privacy_embeds cookie created by the Avada theme.

The user has the right to refuse the storage of cookies on their computer. To do so, the user must change their web browser settings.

Instructions for configuring the most commonly used web browsers:

  • Internet Explorer
  • Chrome
  • Firefox
  • Opera
  • Safari

When blocking cookies, the user must be aware that not all website functions may be available to them.

When and What Personal Data We Process:

  • Personal and contact information, such as name, email address, phone number, IP address;
  • Company representatives’ data, such as name, job title, position;
  • Buyers’ banking information, such as account number, bank name;
  • Purchase history, such as purchase date, purchased service.
  • Your email when subscribing to the newsletter. Newsletters are sent by Prangli Reisid OÜ with your consent.
  • Your social media profile, provided you have liked Prangli Reisid OÜ’s Facebook page. This is to deliver news about Prangli Reisid OÜ’s activities to your news feed.
  • When you contact us, including sending us an email (e.g., price inquiry, information request, etc.) or calling us, so we can respond to you. Prangli Reisid OÜ does not record phone calls.
  • Data we receive from third parties such as public registers (e.g., land register, tax office, or commercial register), if necessary for contract fulfillment orensuring contract fulfillment, such data processing is provided by law or based on your consent.
  • Your visit data on Prangli Reisid OÜ websites to provide you with the best user experience.
  • We may receive personal data directly from you when you enter your personal data in our inquiry forms, when visiting our website, filling out our form at a public event, or participating in a consumer game.

We process personal data for the following purposes:

  • To conclude and fulfill a sales contract, send invoices, process your orders, provide you with customer support;
  • To exercise rights and fulfill obligations arising from legal acts, including refunding payments to you, fulfilling accounting obligations;
  • To process your inquiries and applications;
  • To send our newsletters;
  • To advertise our products and services.

When using the online store, we transfer the necessary personal data for payment processing to the authorized processor Maksekeskus AS.

We process personal data in accordance with the requirements of the laws in force in Estonia.

Your Rights

You have control over your personal data, which means you have the right to access your personal data, request correction of personal data from us, the right to be forgotten, the right to restrict the processing of personal data, object to the processing of personal data, the right to data portability, and the right to withdraw consent given for the processing of personal data.

Your rights regarding your personal data include:

  • Right to access personal data – You have the right to know what personal data we hold about you and how we process it, including the purpose of processing, the persons to whom personal data is disclosed, information about automated decision-making, and the right to receive copies of your personal data.
  • Right to rectify personal data – You have the right to request the correction of inadequate, incomplete, and incorrect personal data.
  • Right to withdraw consent for personal data processing – You have the right to withdraw the consent given to us for personal data processing. Please note that the withdrawal of consent does not affect the legality of processing based on consent before its withdrawal. The withdrawal of consent for personal data processing will not result in any adverse consequences for you.
  • Right to erasure of personal data – You have the right to request that we delete your personal data (e.g., if you withdraw the consent given for personal data processing or if the personal data is no longer needed for the purpose for which it was collected). We have the right to refuse to delete personal data if the processing of personal data is necessary to fulfill our legal obligation, exercise the right to freedom of expression and information, prepare, submit, or defend legal claims, or for public interest
  • Right to object – You have the right to object to the processing of your personal data when it is based on our legitimate interest or public interest. You may object to direct marketing at any time, and we will respond immediately.
  • Right to data portability – If the processing of your personal data is based on your consent and is carried out automatically, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another data controller. You also have the right to request that we transfer the data directly to another controller if it is technically feasible.
  • Right not to be subject to automated decision-making (including profiling) – If we have informed you that we make decisions based solely on automated processing (including profiling), which has legal effects or similarly significant impact on you, you have the right to request that such decisions are not made solely by automated means.
  • Right to file a complaint – You have the right to file a complaint about our personal data processing practices with the Data Protection Inspectorate (www.aki.ee).If you wish to exercise your rights regarding your personal data or have questions about the privacy policy, please submit a request by email to annika@pranglireisid.ee. We will respond to your request by email within one month.

Personal data storage and processing breaches

Please notify us immediately of any known breaches or threats of breach of personal data at annika@pranglireisid.ee.

We will disclose your personal data or provide access to it to authorities and supervisory bodies if we are legally obligated to do so.

We retain personal data for as long as required or permitted by applicable laws or necessary to achieve the purposes outlined in this privacy policy.

Personal data processed to fulfil legal obligations will be retained as long as the corresponding legal obligation is in effect (e.g., the 7-year requirement under the Accounting Act). Invoice data will be retained for 3 years after the transaction. Personal data related to disputes will be retained until the expiration of the claim.

We will permanently delete the personal data once the data retention period has expired.